{"report_id":"10ea0042-e540-48c4-9c43-f6b682476019","version":6,"status":"done","tags":[],"date":"2026-02-18T13:18:12Z","url":{"schema":"http","addr":"krakexn5.vip","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krakexn5.vip/","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"title":"krakexn5.vip/","dom":{"size":78696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (42993)","md5":"68c8497fd0f55210479647baa0e76a9a","sha1":"e07d63d920590f60aef44b3149d3759eafd970b0","sha256":"f0dc6e52a75d1aab0232a76e8e33b05ab10e21fa99554d827400e01e22ff315c","sha512":"b05bf122382c16f4745766602e70d2185920c4fdfd17475ed62f0e66850572289d141487a36af857cb824c23f7483d09266277fbcc7a2f477997ea8639400262","ssdeep":"768:ItT4WSDv1GTkHHKuL2LawignGvuV+oY9vhF:D91HY6gmoY9vn","tlshash":"f273c764a7c1407706b78fca95a1be6c6286e36fd166d098b2fc43e81fc2fe4f546490","dom_hash":"domhash3b19a5aa6b5c38d9b3c8fbf11c4fec58","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakexn5.vip","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T13:18:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-02-10T08:05:51.599508Z","alert_count":0,"request_count":14,"received_data":32911,"sent_data":8221,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-02-09T13:47:54.944484Z","alert_count":0,"request_count":16,"received_data":180498,"sent_data":7250,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-02-13T11:15:06.487856Z","alert_count":0,"request_count":7,"received_data":338255,"sent_data":3563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-02-17T00:47:22.262732Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-02-11T23:30:55.979754Z","alert_count":0,"request_count":1,"received_data":1830,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"krakexn5.vip","ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-18T13:01:51.638725Z","last_seen":"2026-02-18T13:01:53.721913Z","alert_count":246,"request_count":123,"received_data":5157976,"sent_data":55167,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e49b3847.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","size":1270,"data":"","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e569eff5.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","size":3101,"data":"","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-06T11:57:07.724525Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-06-07T01:31:45.124882Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-23a43da0.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","size":4734,"data":"","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-41281e13.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","size":3966,"data":"","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-07T06:59:16.06721Z","times_seen":5594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-458e75c8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","size":1908,"data":"","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-5ba2403b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","size":4173,"data":"","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","size":2110,"data":"","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-05-31T17:09:56.311751Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/if-defined-49fb0c54.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","size":161,"data":"","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/HelpersUtil-27422063.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","size":3196,"data":"","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fe82323f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","size":1427,"data":"","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhX-3214edf4.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","size":2498,"data":"","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-05-31T17:09:56.261773Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","size":21919,"data":"","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-05-31T17:09:56.234054Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-07T06:59:16.06721Z","times_seen":5594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-f72c7cd8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","size":2813,"data":"","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/w3m-modal-a765f42e.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","size":46159,"data":"","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-3602d8eb.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","size":6313,"data":"","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-d51bd663.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","size":4843,"data":"","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fc69a8b8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","size":4963,"data":"","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fb575795.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","size":3036,"data":"","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/send-7c4c9d57.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","size":33591,"data":"","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-39a44663.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","size":17121,"data":"","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/ref-826e0ba1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","size":2156,"data":"","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-bc8c8fdc.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","size":3023,"data":"","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-cd74709b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","size":1384,"data":"","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/receive-316eb367.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","size":6621,"data":"","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-9a611939.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","size":5151,"data":"","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-06T22:30:21.917795Z","times_seen":1323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99f627175d32deced3144853ae54119f","sha1":"b9c761a937e659864b4f04fbf3d132c8d5c72e98","sha256":"85765635423c64ae5bcad7124ca3f875207202eab7339219f772abb11944e1e1","sha512":"ca22ddbf642440e4f4ad9cf8446737931589848bb2d0acd04419299905cf6336a380389f0eb417a68e6f53c4c9bda61489bbf641448f26129d68ca92ae95d2d1","ssdeep":"96:mq9hafUCzCSDKCfhpq+hqqGtdMVZI3o5R3w3fo8C+Nqn0Si:d9hafUCzCSDKCfhpq+hqqGtd2ZI45RgT","tlshash":"a7913e67b0e3005845a37a644baf732c393b600b3a0adde47d5e1b609f57f625482bce","size":4453,"data":"","first_seen":"2025-11-24T21:16:20.877428Z","last_seen":"2026-05-31T17:09:56.37932Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-2886c057.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","size":29815,"data":"","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-a147cb61.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","size":229987,"data":"","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e1b9a5f8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","size":2994,"data":"","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","size":4729,"data":"","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-bd925ac8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","size":6571,"data":"","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fc1e2a83.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","size":3883,"data":"","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-b8f4bc3c.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","size":46047,"data":"","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","size":2776,"data":"","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-05-31T17:09:56.226511Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","size":1955,"data":"","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-05-31T17:09:56.290564Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/property-6708c68b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","size":17735,"data":"","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-05-31T17:09:56.310085Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-7b62a5ba.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","size":3015,"data":"","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-d4dcf123.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","size":2511,"data":"","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-056337cb.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","size":4166,"data":"","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","size":69,"data":"","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-06-01T16:43:01.277185Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/SwapController-128e9645.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","size":13816,"data":"","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-78a86ef1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","size":5676,"data":"","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-67b7a897.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","size":4104,"data":"","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fb848e84.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09ea3f652980ecad9b5e805c6bfd8c54","sha1":"f87a2a4adb6fc4465789a65f7ced64bd48c3a334","sha256":"73a2b75afd236fcf0210f14513e0cf1467dde60789969a95e80003332a7b3f64","sha512":"6335872a972e7aa6255456baae6e496e5717eb23f913f31b4474e0c588ca6b38d40ba983e9a27c63a71421dfc310ed999e319ce4009ff5478cf8f1e1f001f395","ssdeep":"49152:KL3j5T1gIH3wo59lo/PDXgRw0ERirdxQR1lc38NOYw21SnRKEhlhvlbp+HAX4Ylg:8tVxbpjX4uyBCBNk+XHvJaX","tlshash":"bee58e807295b47507a755d4a46b1102f1385ca5b05ec0a8f6ec9cfb3afa889c67ff38","size":3202851,"data":"","first_seen":"2026-02-04T16:46:53.92931Z","last_seen":"2026-05-31T17:09:56.377912Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-8d97d39f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","size":6947,"data":"","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-73a416b1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","size":56425,"data":"","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-36ac775f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","size":1814,"data":"","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/VerticalTickers-27d43059.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","size":23018,"data":"","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-3e85285e.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","size":1576,"data":"","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e0a7343e590e4b2e68fea466ac533796","sha1":"157955af910b602def2fb7ccb3cfc2349619433c","sha256":"1f4e9a9aaf729ae7aaa8082a6c4ccb3082cb5bca5d7ead0f6d129b28ba4ce60a","sha512":"fe989f835a81f1d2f0d611e0750312a9248350632f70aad49f9d0113d7d1ef287e2bb5cef46867bdeabf3a5aaa6f5b80ae07eca85a7ca81ac06e1e0d5b1dccfe","ssdeep":"","tlshash":"e6c08cc4a0c26d005a52a61110bf24e4a024442b70885b028c98e84a2e220b08233e98","size":142,"data":"","first_seen":"2025-09-06T11:46:38.61477Z","last_seen":"2026-05-31T17:09:56.375106Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","size":3315,"data":"","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-05-31T17:09:56.262642Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/home-f7f6e3ca.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","size":22771,"data":"","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e1f7db2a.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","size":33100,"data":"","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-06-06T23:47:44.202455Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html#/Home","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a8333fa4f5a7c115c3d338f715d710b6","sha1":"85d9623120c2753dd2de36578cf1cac587152bd2","sha256":"4812d4d9a9636856ee3e917a3bf0eee7042b1969f9bc5fdb900754755b32b90c","sha512":"96d4a581ff47246c45fa475a2c2874a2a2d2387d7ec1043b58ed94569af99c55647fab01eef77deb3ef15451d5c8cd1c15257efd4c9c67c3dd7e67de9dac188d","ssdeep":"","tlshash":"b3c08cc4a0c23f146702651110bf3af89034442679482b139de4e8993e620f09237eec","size":153,"data":"","first_seen":"2026-02-04T16:46:53.927086Z","last_seen":"2026-05-31T17:09:56.376581Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e741169d.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","size":3131,"data":"","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-22248626.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","size":3075,"data":"","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fc69a8b8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fc69a8b8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1363\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1T3G3GI6LdrbTHSvSNpwx5aBEq4AhWOkZ5iaQ%2FX29Ud3p9GD09bHNbt%2BoK9YGEgqYuIfZheNotJPhou%2BEAK2%2BmSgD3lUY%2F5up1g9Gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9eb821b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-458e75c8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-458e75c8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-774\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEwQTF0e5Ood0c7lqn4tGbNC2r%2Fb3ZCaLl0C2B7z2z21EhiB2s8r%2BRPHW0NZ3kpSEQQ4CSwPfo3SL6f3zjihyA2W2SP%2BiIY3MZThnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed82bb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fc1e2a83.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fc1e2a83.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f2b\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3YvJ%2F1ZJQhaLGuNqyYxfWRLDc4IOwVhJ0Vb9T937PSeqx9rJe8q13r94E%2FnTAhZ05y87FXM%2BAtcmUdpCe8tW60746sk4Ff0v7o69g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed82db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-bc8c8fdc.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-bc8c8fdc.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bcf\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5sDZ%2Btp63%2F02NCKk8HESqKC0FjxYAgo%2Fc1g%2FkorWzrGop5lV%2FsdUJvXZe6nOHpLz1QgaazDoDWoEW0AfTr9UVdz%2F5%2B%2B3OOJxZOR1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0487bb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\nserver: cloudflare\r\ncf-ray: 9cfdcea249c61525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82317\r\ncache-control: public, max-age=31536000\r\netag: \"cfCUkmfLSHImn0WVCsJt7FCSUffmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=420+4 c=1+3 v=2026.2.8 l=374 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a12155c6bad8cc78944c7bfee468b1","sha1":"3684a6988254eeebb4ee2df16fe1d053e07995b0","sha256":"09eafc5ea66462e38244d77d3c57b5f09a16d5de53ada131c1f847ecc869887a","sha512":"cbd356e3a836732175d690418bc1e48eb99cd9d673d21ca092ed1e6d698a9b69fac87072890f892af66375dc903af2c21e29ed31408114609861c059e1e48225","ssdeep":"","tlshash":"7ee0608a2235d2000ec0fb00682b20ab92ec3554bbf30930981aeb2204a7302e342ebc","first_seen":"2025-11-29T02:31:10.911784Z","last_seen":"2026-05-31T17:09:56.237052Z","times_seen":48,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":114,"dns":5,"connect":1,"send":0,"wait":94,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\nserver: cloudflare\r\ncf-ray: 9cfdcea4adae1525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21666\r\ncache-control: public, max-age=31536000\r\netag: \"cfUhkIr6pXeZzg1ZKkKbDihKqDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=460+4 c=1+2 v=2026.2.8 l=454 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0be57955d7f50dd9f7754b6dc10309f","sha1":"1120733df2e8f9bfde2f713c1de00711d356d4ef","sha256":"a29fe26a43771dee6d0de34f06c4aa118119e919a370bf6b37b89d89eb157547","sha512":"b115424fbd8acbdaa1fa6efc5e7f9b447adaa80ea67d542fd77c68fa0748f993670f6befa7458019db1243b2056f03872c714a500260333b50fd2aec778fc95b","ssdeep":"","tlshash":"02f05c1dc884c9a0bb9834cbe8a2089b02504ea0cba61a320a052dca102f45b0d5aa71","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-05-31T17:09:56.222668Z","times_seen":444,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7a3\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoJJmr44tzRqE%2BDr1I62HvieP3i5Q5U5hEiGpirdN1RGUT0Q5u6h%2BGvd9NVk5Y7O%2Fmjh3X9gj1jNTlWyxD7E3F4pwIWerNrcO2aLMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea609d7b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-05-31T17:09:56.290564Z","times_seen":27,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e741169d.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e741169d.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c3b\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ntHMSO0fCu2RISCjbW3ucx6j1IuDCE8bc2hRe0tifmMZ7Hy%2BniUJbOli6%2FOP0eUuKcuRAY%2BB%2FQM028vDrPFXdlhz9gmj19zlIUA5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea01860b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e49b3847.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e49b3847.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4f6\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoHS%2FeucuKa5l1NEi7WB3yLOAwKKcgDLAyMCx0jgIAqzZE62CmjzDh9MnK2PxYqp4R6eoYL6u7JTUkNJv%2FQaHZIEmIXsidBShH6Ktw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02864b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/ref-826e0ba1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/ref-826e0ba1.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-86c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxnaJdDZ6h7wfgF4oMrI3BrRVmPFeVTHuJSEBAsGtSWvpgSdMv94cZpdHmk3R%2FKvgTGGs%2F3aZFoBg0f7tDtySwqIWSJycWEVXextzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02865b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bch.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bch.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: aZVXqCIhR6bzkLEQeO7w0jOWugARsdz/cmA69X5yd8F4+HX68abYjQCMTTRKKSmOgB43dRjpn0M=\r\nx-amz-request-id: XZ4K79NS4V7E0P7M\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:30:25 GMT\r\nETag: \"a62c25ec1acb1fc3718098578b388808\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1953\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62c25ec1acb1fc3718098578b388808","sha1":"5ca0181b69511c10a14f3927fec31a9ceb00f067","sha256":"d600c9ea66bcc09bb7c8462506b8946cf3afe92cb717ee86ee2d660a154653d7","sha512":"4fdc1adf49350c2f5362f58b469651a926221e7b642292f672a7bb25de1ed25a4e26c5b709fbc4232d3a03d9b19681a8e24b13d92a009b295f79231e3a90709d","ssdeep":"","tlshash":"ae412e60b3aa557df410d3f88a2da0b17e733c823c25d10e9af60929a66181da030cc7","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-01T02:25:54.674704Z","times_seen":255,"resource_available":false,"data":null}},"time_used":1993,"timings":{"blocked":799,"dns":7,"connect":398,"send":0,"wait":383,"receive":0,"ssl":402},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5K8/PGb03mDvOOLqmW2JLyZ1SJ7ynzqTdnINvWKfy9emwK+g/a2+o2GpoX/adMrTMsQxDv0y8EM=\r\nx-amz-request-id: XZ4YKN8N1C1YXXV2\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-06-01T14:38:08.582132Z","times_seen":226,"resource_available":false,"data":null}},"time_used":1314,"timings":{"blocked":1010,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-83e\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khwYh%2F8kCHWD%2F6oDsjsmc7onS9NZDh2T3w4Uj%2FUnFzoETcRNTk7aadmaMi051kuaXZHiUlScxhqY6I1dXf%2FQ9xEXAXYOl2tAOwor2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5d9cbb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-05-31T17:09:56.311751Z","times_seen":27,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/favicon.ico","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/","date":"2026-02-18T13:17:50.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:50 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEcUrg3p4V8cMC8adOGCmtG5ntPmYl2tjslSiU3SaR%2Bj1cQ7s%2BPrjxa3E0bXDH4fmjuDwcdWE4QJ%2FjytoKsS%2FUbHSJQZ1njXwQwV9w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cfdce939daab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-07T08:18:02.147442Z","times_seen":523690,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-bd925ac8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-bd925ac8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19ab\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bBGBqa3e0lODpotlpTLa91mcA4J06Rj3GnHMdhnvj3srbXAjhToLycoksg7Yye2YerAE3kj%2B0Kl2UNi0IMgNSajQnof2cHD9qM1LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed831b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcea22e8cf527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-06-03T10:38:18.399472Z","times_seen":356,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":107,"dns":1,"connect":9,"send":0,"wait":24,"receive":16,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2190\r\nserver: cloudflare\r\ncf-ray: 9cfdcea47cb71525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22864\r\ncache-control: public, max-age=31536000\r\netag: \"cfPi3Q2pR9-1VkL9hnF0Qjwt9_fmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=6+7 c=4+2 v=2026.2.8 l=2190 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ec24d6d0f8cc15531022c1d2d10ed5","sha1":"a35dfc22eac4a148d164ba1c0c0a30622d996cd4","sha256":"c17fc5b943b9ef6f7b6ddd64e34efbe217a7328513c76dbf33aed86c0019793a","sha512":"47054745bf01743c5756f0cb8a021dca767c880bbe1ec98a44d6819d6395d991dd88def918500862b763955f09ff0b31a7e8876e4178fd2b0aaaf7711df24557","ssdeep":"","tlshash":"eb412940ad424ea8e6031af82fac34a8555a0d6f64478c0d8029f336325fdd2bac4f6a","first_seen":"2025-03-04T08:48:45.474684Z","last_seen":"2026-06-04T13:32:30.786057Z","times_seen":419,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 44WMb5A998bPhPSYfQbHnuZhOWhDfju6HjAfeV4kwKwFtCkc7PV6wdWSnquRptGPtFAnrPwI3KU=\r\nx-amz-request-id: XZ4XFRSRV8MFCSMN\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.035689Z","times_seen":494,"resource_available":false,"data":null}},"time_used":1521,"timings":{"blocked":603,"dns":8,"connect":284,"send":0,"wait":306,"receive":0,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-39a44663.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-39a44663.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-42e1\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVRN%2BF%2Bg%2BVzU4OqrJ%2BWcMDXlQ86seETI02baNLaEygWAZVRJqPvnvf0dzIUBlzO7lMU0ghCuc7arS4y1t%2B7FlEA3aDJEjj%2BlV18gsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ea820b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-2886c057.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-2886c057.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7477\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8AbTXQBQ5Q7NXLjF9HWk4%2FidF4pH7Qgwm7yaFA2Ibd9sYsyOogvpzJahuJwEFQBsedNUWKClP1jXvGvoUZZb36keW9saiN7bu10YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea01861b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea21e63f527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-06-03T10:38:18.430017Z","times_seen":320,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\nserver: cloudflare\r\ncf-ray: 9cfdcea249b81525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34590\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=549+3 c=0+3 v=2026.2.8 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-06-03T10:38:18.40763Z","times_seen":1359,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-cf3\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mZ0yENJd34vtkaEjVRDTY63p3mOdUEPXWu9mEcjHC%2FMthuAbXd9TpniVIhon2LnsqR2BzSoJPfFQQoRYSgKgLwmkDiUKr1D%2FWCWjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5b9c0b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-05-31T17:09:56.262642Z","times_seen":27,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhX-3214edf4.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9c2\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OiHoXMZSj2knoB6KuLZj9254iSivPeAvM8gCNHMfpIDqg2FD1DuIcx%2Fewu%2Ft%2B%2F%2B89tqRn3TPmCB8WRBZGMfr7YoPME1Z7e1GR3gCbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5d9ccb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-05-31T17:09:56.261773Z","times_seen":27,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/property-6708c68b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/PhQuestion-25ab6f67.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4547\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cx10bGNTKNxDCK8uvdb2CnSGxbeDqpm%2BPzXOgZqg%2BszeR5CPpDsq4q01cf7%2Fz%2FFsfBWbxVi%2Fdu8Ye2fSAtRYemqLX0HIWVHUPfq8XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea629dab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-05-31T17:09:56.310085Z","times_seen":27,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e569eff5.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e569eff5.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c1d\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBiie1TWPnZnzKEeOCwH16bGp4DYfrgyQHRD7yrG8jptbGMvJm%2BJ3QRuOxXMThU7VO1vbf1sOIuPOgACCA3Wvmue4FPKAT6jKQ4Zsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fbdb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/receive-316eb367.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/receive-316eb367.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19dd\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIt7HOl1BPtddclE8a5Uduja%2FlwMbMXD%2BXejGqDw247WGU65ijo%2BO7Wj6fx5%2F9wZNvWovHRIj%2Fqq8IvTi0Dy6dtEfYtw6RbjkWnhAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ea81db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/HelpersUtil-27422063.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/HelpersUtil-27422063.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c7c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i002GF2dogg0SBlF2xGuz3al%2F83IRsvUMoBw9xIrQW2qPfQe2yEj3PydX2LEARkQGoX8xEMjVn84ri%2Faf2I4J0erazwkiCheB1g6Hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea04873b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/sui.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/sui.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 07bW/jNlr6pqKw7IdZaO7gtnPDsT56qzblhqTwroZiMZxfciZpGIeTki7nAXx8p1hYXyLnibciA=\r\nx-amz-request-id: XZ4QJJ6TGD8FXRHT\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Wed, 03 May 2023 02:12:27 GMT\r\nETag: \"4ecd0b491a611abad73010840bc6cfff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1547\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ecd0b491a611abad73010840bc6cfff","sha1":"b8067340a437daa9fcf8bac9e718d5955e3049ac","sha256":"7c02270653440d5120b208cd79c2778ebe629b3d3528df0c61cbfa00b97a43a2","sha512":"b307646522b4518266e8960820e34eea4c4a27fa230f69ad0bd0b2b15b330fcf03500654e1913303a62ba7d5378a000329b6c08d31428854dac293aa00c9afd7","ssdeep":"","tlshash":"be3123ad279df57a8400eb38824b14703ad37cd66b05d43c67f42e5ada1905f26a168b","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-05-31T17:09:56.254067Z","times_seen":142,"resource_available":false,"data":null}},"time_used":1977,"timings":{"blocked":799,"dns":0,"connect":393,"send":0,"wait":374,"receive":0,"ssl":408},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/v1/api/pay/getCurrencyRate","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /v1/api/pay/getCurrencyRate HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9LI5JG612fOgnGXvBiFbOHxx4WsQNBJmMxGHbX2S37oQ6ZM4NiyElIN%2Bqh%2F5BIVDup7QF8ZEtnXoqf7fOZa%2FooQTNtV7UqEKX0x7g%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdce9ccf9eb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"953a67e5cfaec3c486a6de1c3d1f8bb7","sha1":"63cb8d68efca3cbabc837c84854d307a6b9413c8","sha256":"be1c8f94cfa6d8ad4e528808f312f20314ff5a8136a8a5b8f4fb3da6ecc2ad4e","sha512":"3a4316915ccd1471fb4b9094cfeae384b31becc8de8b141084df582337b22cb032277c8c1e11ff0057cb3c3a412a5e4844d07ade6050b515d8fa4cf9ba5405e8","ssdeep":"","tlshash":"7bb01255ee1890e2e401d002406effc0996c306382c00324e4dc47189544961a042426","first_seen":"2026-02-18T13:18:17.638901Z","last_seen":"2026-02-18T13:18:17.638901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/home-f7f6e3ca.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/home-f7f6e3ca.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-58f3\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPy%2BB6Rsm2qI8frC5S1FT%2B%2FDj%2Fq0PMPjanYTKsjyuzUJLcaLFA4ARBtBcJSQ3pgHOYsOz15Gy6URUo6it1UJqjVDMQABED6AI1IUzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fb6b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-559f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5oRmy95v61DMAp3sqv7Lqp1leGYYRukmsZBhD2oXlnco%2BtQFBu0ULWBK3a3%2BEJFXjVRufH1YIAv2kj2pHfjcidikIjApbYOJduvSNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fbeb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-05-31T17:09:56.234054Z","times_seen":36,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-8d97d39f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-8d97d39f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1b23\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2hDkITd%2FW%2F%2Bi%2ByGix75inKiYCGwI4Bo3XgMqBy9sE0u%2B9rRQeOkWF7qyvd8cvvVHqmh6MajM9XfrOaCNfeHi%2FOvr1RIC0WcctrjXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d7fd8b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-3e85285e.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-3e85285e.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-628\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgDDw8PfF2HvYcgpHSml0tUeryzZkUNN1kRFsizKYbktKBSKCS80HoLjLZI1Fk7OdvVvFWuONW%2FbaD%2B6VdpDfp2rKfSVQTd4tn5UoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e9816b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-bd925ac8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-bd925ac8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19ab\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JszC5BVPEZmzNPAieOnzUfoMlehG655HYHZvhGYr4el8HVqET35kZETMQUjgEGw07MA%2F0qtQOR2Fmq8582n8h40o56Hjc6jVExwovw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0988bb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea249bd1525-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1068\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Feb 2026 01:17:52 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:00:03 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbf39dceeefd4e7b837a0d5954c94910","sha1":"4853dffc66c53275b73fb2219ed5723a5d6831d6","sha256":"1627d4121b7cb00b96ee320b37893b30d6e0a2e89f93a21bc43522e9599b6bbb","sha512":"86fe88adca5689e8c3ceeadbdb61ae7ab42c6ced4756256d278f0d151977ddcd3c1f9b5b1444a87fcf258602d04b866136aa339d83f4342dae002de9eccdeb0f","ssdeep":"","tlshash":"5290025138485e1cdb491c59f04a7a52604c149324100f7590c05b0446a44361700474","first_seen":"2025-04-08T11:31:59.266604Z","last_seen":"2026-05-31T17:09:56.347832Z","times_seen":58,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-41281e13.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-41281e13.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f7e\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udlIM2MXUTWoSQJMhceI2ZmR5bJLG1MMPuvYdLsJcqQf8mFQpPQ%2FylZsRQsN%2Bkd2OcM1WF5I4ZE5Ka3VedDRWs%2B4hwnBPCQNIUs6uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea04874b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/index.html","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://krakexn5.vip/","date":"2026-02-18T13:17:50.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDEEpBppfCLxl1zeyLeqaKnGTg0L8LuIwewSzhZbfNU69q6lwz0zHSFfDvMMIehVsRuDSzqPHXn8yIW2kUEepEYxKGRpIpgN%2F%2BcE5Q%3D%3D\"}]}\r\ncf-ray: 9cfdce939da9b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2364), with no line terminators","md5":"fc3b78b3fb9ec2e09a061b1566bd2b86","sha1":"0b6d5029476a9956beaf4e18aff4d8e9dd24638d","sha256":"0c25d38c18c946744ebd1c5fa986c41471e4857cf801543fee30836b3fa33d6a","sha512":"ba20af8fda6dd72ecd48387e78ca87dd121a0b7e28afa5d385eaa5cfc9aa0bf6c8189c8a4fcc8df353b9c01ca90e9061ba88f8d780b7ae69bb40f9820b01feab","ssdeep":"","tlshash":"694123539442261af0238eb992f9b924c57cd426d6921f99706179b8c7c2fd681e331b","first_seen":"2026-02-04T16:46:53.915719Z","last_seen":"2026-05-31T17:09:56.342739Z","times_seen":15,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e569eff5.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e569eff5.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c1d\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDA87ROYPk294piNSuAMpALuJgG1AgnY3HKYThe4u8OVRuIkcbN68mqUaIYGp4NYvFuEGh556X02%2F%2F8Zl8F5GcHIw77DUY%2Fz6ePyqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d8fdab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-22248626.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-22248626.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c03\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2B%2Bx2Q%2FhXxgL0N4xE9SEd9AUxVPwmWZnrq8NBeN%2FJq1%2B%2Btu2%2B0QPc5GmquQFViuwmo0i%2FFztGe9%2Bh0b4wkqart3A0%2FzdPawn3vVRhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ea81ab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-41281e13.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-41281e13.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f7e\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19rBJGUwuDRJM4D6CApGuS5T8KtazqTpn2%2FNAIImyAiJm%2FkIo2krNwcd8jL8Nh%2Ft2xvECRcWIoixhW85%2BpRuCz%2FmZeSzsP3xUoYBvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed82cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-cd74709b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-cd74709b.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-568\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjWxeT%2FQ4uSaAmCtoPOiJj6M9e5HYI4oLXmAZPaujYsiQJqq%2BiM0JHJRCme%2B1Wk0X5if9dnqExblaT47b%2BxVFDB9lOXLVIisUKczlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed830b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e1b9a5f8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e1b9a5f8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bb2\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1a6tfphWHn657d3S3gdqx80QbhVYqGEZilsgIOloQrXORV5IORyCwAxJrB%2Fv98Aiqye9z8tzLIIBa41LBYyuSIfd%2BOfZtUcdxd6%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e5803b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcea22e77f527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-06-03T10:38:18.371966Z","times_seen":320,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":100,"dns":0,"connect":11,"send":0,"wait":32,"receive":11,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 910\r\nserver: cloudflare\r\ncf-ray: 9cfdcea49d421525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 40428\r\ncache-control: public, max-age=31536000\r\netag: \"cfmeYviP6kCNFgjEWLRBgPUJnDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=310+2 c=0+2 v=2026.2.8 l=910 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-05-31T17:09:56.308242Z","times_seen":524,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/v1/api/config/platformConfig","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:50.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uflqJds7LNJ2fDxqZwh3fjCd4WKSNXOy1YKiBYJEgC%2FGphpb9b9FuCvSJPEmZvNV87VK5O6xtggJNQSLk0vNlZ0VR8kX2nRe5uc%2BSw%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdce998f1fb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1e320c051ca2af982cd7895c9e1bb81d","sha1":"1385cfcabf9b284e0a34a552a53321b43f733e11","sha256":"696b21931625526fe4c3c1f31828417bbdd19ab42402f23c0c75131e02b89c59","sha512":"cb0cb799358d9274eca176f04530646bb1553321bc09cc7a09c5ffab4be0a12ab17abcf06aa49e265ecaf910d557313670eb254b2dc66fd70efd65bac7029b11","ssdeep":"","tlshash":"3481518e372ad5b8c6e415cbd4d728190f79a9da6844f44fc29bec683ee78d13128217","first_seen":"2026-02-18T13:18:17.646723Z","last_seen":"2026-02-18T13:18:17.646723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":510,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/ref-826e0ba1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/ref-826e0ba1.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-86c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaiP40lmXylpgjFGP3%2FgdYfF3i6mjbB4L9TiOhsJe3mLvPVdcHLwYB9UxfP%2FcqnXQG9AvFLjiTpS3qmqzFG%2F2H5pCoGkm9g4tRVh4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e780cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/if-defined-49fb0c54.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/if-defined-49fb0c54.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 982\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0pEsbLuQQgqjoXM%2BVF7ygazQ1mefCpT30MdIh1XD%2BMQyPsE00iNnX5w1wlqlQNjxOMOU73vZV10LJn98OmwTEjBhC5wtVqj6kRcwQ%3D%3D\"}]}\r\ncf-ray: 9cfdcea0185cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fc69a8b8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fc69a8b8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1363\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p6XtscBpKCBL%2FEabvf8xuDH8iYBvQGzGakgz7NBJeLIhgDWmIF2%2Fe9olJv6Fn4TRZnrlH0SSZOsmIuyJqDvbHnTK84bvdFhTxua4bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea04876b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/manifest.webmanifest","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\netag: \"697bc72e-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRye539v6Gw09WC7%2BIy6dekprzwSBEr%2BGrrQbG6rN95GDfKX5ZE%2Fpm03JRsqMu3VuWI1GnyTNb4%2Bm1DBHVmYA3FGuNftCpR2ilAbTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cfdce9cefa5b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-05-31T17:09:56.201149Z","times_seen":28,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcea21e5ff527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-06-03T10:38:18.35132Z","times_seen":359,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":102,"dns":1,"connect":8,"send":0,"wait":30,"receive":4,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ada.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ada.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NNYHPuZPaCfIBsLl7xteiUdrvHDc0tSrCF+ebp4NxhBCY2u4KPFLAk80A5mtWhSDVSiCRnLyy6Y=\r\nx-amz-request-id: XZ4ZGYVWCC9BE2G7\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:08:07 GMT\r\nETag: \"958ad0ab023fedd13301398a46f0ea98\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6511\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"958ad0ab023fedd13301398a46f0ea98","sha1":"1f006086eb1afdeecc534e1f9990435502080c98","sha256":"2f91923ef20d262b5fc74abf33fdffb7888e7cbce646e0380122825cb872f410","sha512":"819afddd9ee026b64182974f5e80c349651953e593725109b1d723884f4bd463e83d8443a8a22ad1b9ed76dbff6456071d19c5ec2787b4673d9c7bc6da4389bc","ssdeep":"96:HEENXWNXq2E8vTAd/IOZVMa/zSdv/RPk9WUvykuM+Xw7zROT02yrnfqzE:jXW02ELNIOZSe2M+Xw7oPSqY","tlshash":"25d1735973faa3b8b001e7fe87a794617a4529e36912d574c3b60e00ea8503d4efa853","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-06-01T02:25:54.698993Z","times_seen":199,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":903,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7a3\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvpSahqQja533fVWWQNeDnJ5gRtoCvteetnkGLqGMavNGMWo7HNrw9bR1ifmNk2vVR1zKKV83bkjr3C3k42G9Sh6V699bTJ1IWB5%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea609d8b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-05-31T17:09:56.290564Z","times_seen":27,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/VerticalTickers-be1df74f.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/VerticalTickers-be1df74f.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-14af\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Hmve5Mrr5TAUCErOnduTx8FPxkV8a37HXHxYfopJZiKkKv%2BBjx6bH7v5qi9OvkpaKTYdFgR2WGd2eopMP3NdzCPBNxuz%2FowXsaVRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9cffacb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5294)","md5":"440cdeabbb9eab724c17f0b5beae3338","sha1":"4c99f5d4947c5450a2d24d49aa1f5784a6216b26","sha256":"be1df74f1c54fed82321f93f8c4813ebf34185b3e4076ee17c0f759ee15bfae6","sha512":"e5e18c4697a9c2e62fb24c35ce7df30295281af626884d5cc8c5efe85fff78d4b50cde4c4b1a56938438f0acaaa250ba8e6a6d666d942be0a9a8d3694d26afe3","ssdeep":"96:yl3R5eATYYFMhn81C8Z888kFXPPbsckvWZGqzJTtTlhI:yl3R5eCYYFMh8f2fkFXPPQvWZGqzJTVw","tlshash":"91b1772b63d61f19d133dd041be9225a83a8d1b3d2b523e8a4905b258bcbf0e15f3286","first_seen":"2025-12-10T07:39:13.841218Z","last_seen":"2026-05-31T17:09:56.246728Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-d4dcf123.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-d4dcf123.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9cf\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5js7JXW4qhBran46hIE0aLLBV5iQrEaSUXma1Qg6dSVqvfMFfAKjW0fjlX7IGe1DTVEwq9wv8yjGvVm78uypJrj21uUJNWZ0fzsm0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0286db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fb848e84.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:50.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fb848e84.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-30df23\"\r\nexpires: Thu, 19 Feb 2026 01:01:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 983\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dk7wjloBhAEmN9lM1NpyyEZX2%2F2xvbqaIMse0CZ8qupXo68BzztD5g8w5QhBk0idiuRpw70E1RST4eyadBSLDoa7AmLc17kXWXQndQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce949de1b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"75d749d70b7d5340f362582e6b9bd596","sha1":"de39c5508ce36d40c5c5e26ec6a10415e72211e8","sha256":"ad95fc08c78148ac24f5432c5e86d56a8ca98d134eb058e3a32af4e864cd355b","sha512":"fb44839f1dde0645567c86d7814151b93320a95e335c99a902d063390fa43dcd71364a88baba363ee9cc866f2d864672e52072dc1294eefbfc6c5ef983100f97","ssdeep":"24576:KL3j5T1gVPH+H3woNAWuC9lo/PDXgRw0ERirdxQR1lc5Z6Uzx8N2:KL3j5T1gIH3woH9lo/PDXgRw0ERirdxH","tlshash":"ba458d19a1ca249d0a7341d5b4ca36c170ae0cf5bb9b8e7796fcc92921f1814d2edf78","first_seen":"2026-02-18T13:18:17.650857Z","last_seen":"2026-02-18T13:18:17.650857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-22248626.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-22248626.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c03\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEiOBAgOtEKDLUhA2EDSVvj%2FJbzfL64z2S7YTNxOmJ%2B4ckC4lIB8sHDDXBtKLJU0CuYsAeaKAaNMHAq5zh6zA5jgey9L1OUm7W1%2F8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0286cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-39a44663.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-39a44663.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-42e1\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2HnYWs4SazxcIfH8Q4HR6CVl8rAwWSfdgTt6HbWVgkqMGKZFLSwTSRqrfPf033UndCo%2BBj7eYGpp0ScauUUYmOKKRrGjbhhbWziYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea04875b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e741169d.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e741169d.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c3b\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbWKQbSD65whkoDjP6q4fmbNM0WKLJUAGzv8btyfAHBNoIHTovcqqIZyCFsAIOLMP3uklYIyFoMI7DO3Ewstd%2BGIeBrEmKAfhmoQeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e8815b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/w3m-modal-a765f42e.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/w3m-modal-a765f42e.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b44f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FyhblbWQ57q8VIAi9B3d0fHm1wL62VX5A9CbYT1BsDALO%2B4850uFdhvxIh1e4kPFtR1h0i5LWzd0w7ZETAzxfBsYId8TutPxi0Fhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ee839b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-3602d8eb.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-3602d8eb.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-18a9\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2h3UFYbFn6CYBHP6jUc5J0fGet9f7jFoiERARh8LbIcWAKe%2Bt%2Bl21Oc2Uv4B5srlyR2YzFazNBzdJObIDByaTxRQlLUF%2Bp3jW3eseg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0286bb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/ExchangeController-95d3f0e9.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1279\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0wF%2B2RP9ou46w7bx5UM81OOK37CQzLCB2HyAXWTArYek5fe6y2gZuQfbM%2F1QqcZATPW%2BPvM7uqQpi0QLGdriPwB1MSNCVjpy0z%2BlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea09883b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e1f7db2a.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e1f7db2a.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-814c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZFsOQoceLdqMZ%2F6u9J3%2Bev4MnwFnyArBWYf8cL4geMrWxOzdgoMFP26U%2BPJC7N7m5mi74iHDp6cwyLoP8pOeg8cpMAwClDx0diojQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea09885b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bts.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bts.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cDLjBJgVG+iso14jx4NS9w0rQM3iVpjH/qcTrCVfPmHIGMo0bG2G2Rv7hzbdgNGHn9bUbA2C00g=\r\nx-amz-request-id: EQNDBB8F889JS9RS\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:40:04 GMT\r\nETag: \"a12001eba3f8b40d252d09e0d21f6884\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1433\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12001eba3f8b40d252d09e0d21f6884","sha1":"874702fd7e69b788e419bd5258c9a80a9edc486c","sha256":"c9c78d7bb49415d4816f380f883baff55ce5f88997875c36d8ea98846a191c5e","sha512":"891a2a6a3f995e8070e6a6f2c6b9922be3539cbc22347e05fd867ee4a49495a5a6d2f4a7db5bc641daa3c981d143d14d7526d018af2252ba3f7477f7e6afb931","ssdeep":"","tlshash":"0c217411b324a23c30087afc527ae473fe605ef2951150d4dbd90d80f95266dada2dd3","first_seen":"2023-09-10T20:06:11Z","last_seen":"2026-06-02T07:26:04.047103Z","times_seen":249,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":1199,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/property-6708c68b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4547\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMxgXwoCRy79jgnHEzF2XUP93dn8Y3UdSdBvAjkjUkxLK0lnRKpo5YQlkEeQd9itOPuP6p1hzM32hpK%2BdSQbq4IfmngQPjnRdiwH0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5b9c2b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-05-31T17:09:56.310085Z","times_seen":27,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 982\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC1CgEz7p25HWpmgOG8f4rdz%2FgnLZFdEk7MMl7GZcbT5mwFLokCvVbZXbefYv3dSVVMk17JccJ8YQ%2BRbnQhWx%2BkBMbF88iSRVy0%2F3A%3D%3D\"}]}\r\ncf-ray: 9cfdce9ee837b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-06-01T16:43:01.277185Z","times_seen":48,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/send-7c4c9d57.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/send-7c4c9d57.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-8337\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhwdAyrAO7CbLuwQgFWVKlj9Oe6yZVx0c0l0HR4MXwejm88jlHhYi%2BA1dGfyZqIGJKvA5BGLotHRcVe0CE66hzpMnqSNNr3JVMWy0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ef83bb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-78a86ef1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-78a86ef1.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-162c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvEWvVLF5XCfyus6KgVZsUz56BINlZ3K8UDm9ogW2Zo0pgifzmYzHAq6MPsN1CgARAMX0UG%2Bcvp%2BiydqZ0iXPq19GLYWw1ncp6Sqxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02862b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-23a43da0.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-23a43da0.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-127e\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6Nhk%2Bu9xRhDk21WbaFLIeKy%2FkaAUlYi40hDaUwL8K6JBhOILmmXqpi2xF5atwdGpz5p6oLKqyqyqi%2FHDvBdUsn1JzFJrO8HzjuiTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02869b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-cd74709b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-cd74709b.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-568\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyGz8SPUSRZDZDHqvLj2g2AqP3TJP0cH9LqJBNQPOkxfRoYAGT3ZbgOFLtQ6m2yrrYb9EWI%2B049pXxCCqMrE18QpbkenBBJr6Tr5Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea09889b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\nserver: cloudflare\r\ncf-ray: 9cfdcea47cbf1525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 41773\r\ncache-control: public, max-age=31536000\r\netag: \"cfVAcZ3w6iX14DvHKhBFs4CgkyfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=646+7 c=3+4 v=2026.2.8 l=1318 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-04T13:32:30.780774Z","times_seen":575,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhX-3214edf4.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9c2\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjXZwLlBEVagLxBmefrJNIN%2B7XEIdqEa2VS%2FY%2BOvBsJxBFc8PL0zGQRtLwsMaB2B0DjB%2BnlMA2n5wbFzuTa%2FVVjjC8P9jZhmYi51NQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5c9c7b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-05-31T17:09:56.261773Z","times_seen":27,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:18:02.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:45:45 GMT","end":"Mon, 11 May 2026 20:45:43 GMT"},"fingerprint":{"sha1":"2B:E7:9C:F1:20:87:57:1D:74:57:A3:8A:2F:DF:E8:53:2C:1B:2D:9F","sha256":"72:65:51:C2:D8:A0:F5:34:00:8F:17:4A:E9:58:C0:8C:A7:4E:37:0D:45:CB:74:E2:1B:47:B6:1F:87:F5:36:E0"}}},"request":{"raw":"POST /batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 783\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":783,"data":"[{\"eventId\":\"5549bf53-efc6-4086-951e-3affe21e921a\",\"url\":\"https://krakexn5.vip/index.html#/Home\",\"domain\":\"krakexn5.vip\",\"timestamp\":1771420672860,\"props\":{\"type\":\"track\",\"event\":\"MODAL_OPEN\",\"properties\":{\"connected\":false,\"caipNetworkId\":\"eip155:1\"}}},{\"eventId\":\"5aabff73-deae-49b0-85c4-ac7872936367\",\"url\":\"https://krakexn5.vip/index.html#/Home\",\"domain\":\"krakexn5.vip\",\"timestamp\":1771420682861,\"props\":{\"type\":\"track\",\"event\":\"WALLET_IMPRESSION_V2\",\"items\":[{\"name\":\"MetaMask\",\"walletRank\":\"20\",\"rdnsId\":\"io.metamask\",\"view\":\"Connect\",\"displayIndex\":\"0\"},{\"name\":\"Trust Wallet\",\"walletRank\":\"40\",\"rdnsId\":\"com.trustwallet.app\",\"view\":\"Connect\",\"displayIndex\":\"1\"},{\"name\":\"Binance Wallet\",\"walletRank\":\"10\",\"rdnsId\":\"com.binance.wallet\",\"view\":\"Connect\",\"displayIndex\":\"2\"}]}}]"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Wed, 18 Feb 2026 13:18:02 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9cfdcee42e9c49cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":38,"dns":0,"connect":9,"send":0,"wait":29,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/SwapController-128e9645.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/SwapController-128e9645.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-35f8\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtsctVh%2BazaaEFlcIx4BbQq988wFRtKpdSRHiLaBxmwD8uIcLYxmVLLy1NaRgqTBHwZDDnVWgZEP6ynO9at7VVkeFN5%2Faoqw9nPL4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e9817b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-f72c7cd8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-f72c7cd8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-afd\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mf0SiNtZMB%2Frcf5R8uATkddanX99fwMJv5MsxzIO7VYnC8UGtRHODIq9J48NXmusLKyk4qYKtmlvgcc2FzredyBmZLbsaLky2y2nCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ec827b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-f72c7cd8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-f72c7cd8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-afd\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkUMlQE7kX7O5vYZw0YeYHYjIZ%2BXjFXYThkhDQRbBXZbtpXm6t9xuzZlbic5hdpdNdYEkirSc60xVc1ZavYjeqtIFjPxXLFCIMiiKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea08880b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fb575795.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fb575795.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bdc\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtdT4WJE9er%2Fc7eylQHoLSJwAg2Rea5h91gK%2F51W5k%2FS15xSuc0EC0eRAOu5zKCqirdl%2FlHA%2FHG8%2BKyrL3ctYFzdngVZoJY6xP6wUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea09882b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea259d21525-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1068\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Feb 2026 01:17:52 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:00:03 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4da37e289375b64ae7552b2506755cb1","sha1":"acdd72bbe25d8a5d280ad83adb768c0edee09556","sha256":"7ccbd0280b0eb5fbd6401cf1fbf53f0e75d5b00de738ba87bceda3dc20eed102","sha512":"336997783d51437605548b7c47f260c7b3a39b1a48f7456f052f261c475189b80e69824d4268673adbce497b8af344ef348bf461e8df99b1c6e3e752e7eef987","ssdeep":"","tlshash":"4751659e5780ddab5f349788e14cf9dac83ed00782cc58ea64f2c53440fe823b3119a6","first_seen":"2026-02-04T16:46:53.818162Z","last_seen":"2026-02-21T20:57:40.303275Z","times_seen":13,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":118,"dns":4,"connect":2,"send":0,"wait":91,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-559f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2LYDENl%2F1BjzqNTP5pr%2BQhefe9Yse%2FoXAyOBwJ352Ay335mk3IrG0X%2BAQly%2BiShUyJCboC2pAcxrywEptAMxbVOi0kHOMyLDt3ozBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d8fddb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-05-31T17:09:56.234054Z","times_seen":36,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/index-c074926d.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/index-c074926d.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-876\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPwDdnMayx6kYapTNz05gv0jKTewd4ZnY1WK%2F8G1EaLiowP0QobIG0SDiajcoz4duNNpZlVbUlcGqVBh3LJyTe2Ung81%2F051d0xSxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9cffa8b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2165)","md5":"24fcaa8d1efba01db124557375dc628a","sha1":"323606a4765566ff4891b9fc0107607f387b266b","sha256":"c074926db6a49f8c4dd30fa9a9101326e20a337c8aaeaa0203be8d5673ee1e55","sha512":"0cb578a5fe13704683a3d987520f9031e4df2459c38b313dce492fdb3f0686df4896168d1463566032864e56c9ffc20e10e1d6f478d9fc7b64134db34afeb937","ssdeep":"","tlshash":"79417d3be8906637d823b51497d916c4913cf1727da049e971283918cbabbf4031b30b","first_seen":"2024-08-20T09:17:43.593605Z","last_seen":"2026-05-31T17:09:56.202492Z","times_seen":37,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/ExchangeController-95d3f0e9.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1279\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vk9g7X5Pi7vv0IIU2tckT7xP%2BEEeU43SWPQH%2FXqWhpKXX6wIvMR%2BLX0HGcxQZNUyFC9luRcm3UgqQzpFfhnuUwClIl9ccRfF%2BbTE2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed829b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-3e85285e.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-3e85285e.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-628\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbyVNrH8eVFiWIGgXEBQDO8g8tHagsKNq6Dm0dxR68ur74MK78INZH5Dwby9%2BNewjBXrESG%2FtKGNHeHqcrEK9QgJeiNERVgceVUjQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0386eb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-36ac775f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-36ac775f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-716\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2F1ex4%2F82KW31YFI4PddJB7RMZBi04Z49tlG8JQBnXyfoTwWrAfVsgcmw0ZseeJqaPw7pk4RKL7IMEWM84JYDlRxdxFePlI3hF1COA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fb7b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-8d97d39f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-8d97d39f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1b23\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aIqhry4JtnYVw9OyyFGLg1fzRQCfEDUsmGtOufxPE4SAIsleNKtg6q%2FbUrnu24SQB0sKoxJ1Dkb8vG6ChIoOZGUTcQk6ysPhTZW%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fbbb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-9a611939.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-9a611939.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-141f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5YdfERoltHUmTE3Gvc52oxXCvW4ki0UXot9IKf2nJJszpujL89JdanQtMAgU2hZUgyoyVp0Kh2xfZlF9Yr7U3YOD6%2FttRnDmsrkcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d7fd6b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e1f7db2a.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e1f7db2a.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-814c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULZtPaeYH008Y7pkhTgeMl4hkaJMcYiuWyFpXN0itlgWr0vhtewbPfR3EHk%2BCmDBGimcKysN%2FgbxU0WJZFX3I0U2ksQ62DIMTSUSFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed82ab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e1b9a5f8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e1b9a5f8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bb2\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MwxqCsb0zUqfQehF%2FnDe3IuYP%2FEv6esITCcpQ%2FWVHmmzJFAeYJ5Nb%2FN69NC3AQ4GOyT%2Ff2skdgKFLAkOhJkMfSD5qSnt5WCSrxaqvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02863b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 03:00:19 GMT","end":"Sun, 26 Apr 2026 04:00:16 GMT"},"fingerprint":{"sha1":"06:96:2B:A7:16:04:70:E2:E8:5F:1B:69:8A:D8:D3:23:53:25:70:1E","sha256":"25:46:C3:C0:80:39:3A:62:7D:18:59:B4:5C:82:98:75:26:A1:D5:60:A1:A9:C5:5F:9D:53:92:8E:60:8A:F3:FC"}}},"request":{"raw":"GET /mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhTO%2ByNtrHQEvorKRZ%2BzHn9qRNABAfMdW%2B2gx0wF67mR6%2BG%2FRJodNYMywuK6vOJXYHe6OJfHAjOn7zXa9TcewADegEyVXXcwtgK3DfhpUuiv\"}]}\r\nlast-modified: Tue, 17 Feb 2026 08:21:16 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cfdcea59a0b6e70-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e96920da89cc922274247fcd293696f","sha1":"84896a016118ac7d371cf40b55601c9b2ea16e08","sha256":"03818c009e623cf4b6169657f9cb99bcd53e89fe152cc1809154c5d018982e8f","sha512":"99764c35f30fa0ffa84d012975cbe5c977d1272b6f9cc25cf47ad25f0a27446fff2ec7cf9dfadc74714a97df2089c1fdeeed8f39a38ca0d49db04b9baf815ede","ssdeep":"","tlshash":"2a11bde12e3ca3ae80c7438e855641669b2f73f571064c901b3ca5323105becf883928","first_seen":"2025-09-06T11:46:38.597902Z","last_seen":"2026-05-31T17:09:56.263515Z","times_seen":85,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":167,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-73a416b1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-73a416b1.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-dc69\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmGRiKvnBZ%2F2RJABiC97NSC%2BAzG0B9EIhnzwCBuEa8LLexVsafHKUI54psSM6%2F6qYoIy%2FHnsyQEEQLeo6Nhl797ANzQeeM7UulIgnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e3fffb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-e49b3847.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-e49b3847.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4f6\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3qrw2aEBnlg3op2utelKNzhqmg1%2FD3qQ2E54QNF85jhJlBtX99iFfb2Pfku%2F3KvHXgkm07m%2BdC9CI0hAk0bzxFIjtPhZCMTuL0Ghw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e680bb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-73a416b1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-73a416b1.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-dc69\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srB3UiDEFZh5oQGbP7Xpjc%2FSJj8sL3lyt5YyrLZbPc0D53fQVemT2eU5nlOSgj7BehPp4rINeF54LCgDGOSSfO4huvuV0mgLcFxSIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0185ab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dot.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dot.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WxSEibo1Wlp1Q778eE3PerNZLiXyCQ3e0MH7uQ9+GkEvZHgWVJytZdV9/1Ho7w3/ICYl5+LpuaE=\r\nx-amz-request-id: XZ4NJYF1S1SFSKQN\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:58:32 GMT\r\nETag: \"ecbeee3b982b8166e9b11ef7f85a9bdc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbeee3b982b8166e9b11ef7f85a9bdc","sha1":"79c69d70b46af0d2eb0447096fb9ef48873d24b0","sha256":"2d212db8dacb8164a85eec84c39038a4013d398d1fdbc680399c260a013f52a5","sha512":"6a47534c5310fbded78567b1860c94d6bd07e2e186fd7fb5057431d45b5fc80f580fc6ba4a5782e034243d2c9f1f47dc732dfab74551fc14f52b0a40e11b9472","ssdeep":"","tlshash":"d6518591b339d2b8b005f7fe023a6cb1ab926de27e33c5a55bd60c14d04740d8a925f7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-06-02T08:10:02.673932Z","times_seen":731,"resource_available":false,"data":null}},"time_used":1303,"timings":{"blocked":995,"dns":0,"connect":0,"send":0,"wait":307,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T13:17:49.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 20:46:37 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w98ZXHuKtP7mR2xZwYABvTg7%2FlHJ2iVJZBAKaWPIXgWXEU%2Biv2SJrSEGlyodfiOj7EHizI7BHb0son5xQG8Ww0Ts%2FbLAa1qOos5OVQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cfdce900ea6fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a94cf09d11d3bcab3ca6d961167e5d42","sha1":"05038eeab9c8fe632402cdd0617983a80092750f","sha256":"f575362fb161a660ee78538b8fccc9bf7b459f5b36d7ba87ad2c6db2537d6188","sha512":"13130ff2cbf4d2da55dec18421908fc0c0b1ee5d6b992c133e0a206b44c8f4acb9e60fcd3a325650f9bbfeea8c7548f8f814d8dd827ee02ce6d5b1496b42b486","ssdeep":"192:vS6WuJz9Cc5T+KeP5VPkLrhkohUxSPNS6J1Dg6VEHnhZBt9HLtm9hafUCzCSDKCB:vS6DT28HJtUdrtmja8ItTEaIARgvY/","tlshash":"b1225367a8e300596457a2641ffb332d3635900b7746cda83f9d2ba48f83f858453bd9","first_seen":"2025-11-24T21:16:20.874299Z","last_seen":"2026-05-31T17:09:56.194935Z","times_seen":34,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":57,"dns":22,"connect":8,"send":0,"wait":365,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-2886c057.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-2886c057.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7477\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwcGOiZG7ctUW1i6dVZ9b58p0nq7j2aKsLouQFmH93u52wmWLIk1zLE2swt3z1MRkJU5aGzYHETAEZMcw5zhoLM6z9V7PryCC6bdRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ea81eb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-a147cb61.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-a147cb61.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-38263\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwtLXJu2zp%2B8hhEch7yH0BYkzF2xi4AwRrti81t5Mq9HIb3I1%2FaPVe2rKvcrqPxV%2FtJSHyq22WE9ebQsUxM5elTkX0PBVRw8SBE5HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ef83eb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xmr.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xmr.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4Pg/JI54xgjwMGPfIxkKRSvcfIPPc6DdN9uJUX6L7zF4Q+F/pXS7drJW5H43/H89pwFGwzJdUNM=\r\nx-amz-request-id: EQN8VHQA9KA4KHQ1\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:26:40 GMT\r\nETag: \"fdddffb238bc363e6e7d7e9fb8b2cbfc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdddffb238bc363e6e7d7e9fb8b2cbfc","sha1":"2472cd3130002709666e130d8bc96fe1fe23fae7","sha256":"d4056d45614e9aa58321b8db2cac9ecbc6c3d9048d49ccae12a6ca5a5a31a06a","sha512":"da68083024e8e5b8412c24febd6fe422cc780c08242b2a4ccd59ff1c37feb820e78046b3732991589d28681f4480661505107dc06616f178be39b310a7674fd3","ssdeep":"","tlshash":"64f002a8f1d8a71c78086344e73b6be061d17ed5f6434351f388bb25b2440569c106d3","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-05-31T17:09:56.204986Z","times_seen":154,"resource_available":false,"data":null}},"time_used":1578,"timings":{"blocked":1174,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/manifest.webmanifest","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\netag: \"697bc72e-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FI%2FaGh36Rlx6JFCR3WS9VUpnanj6OT5SnOkfWXuDQsexI989wRKGtY0xXC%2FUQRK1k4qSGYBtw4SDC4CCjJZ8RR0mLq%2F4wE9LZyH0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cfdce9ccf9db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-05-31T17:09:56.201149Z","times_seen":28,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-d4dcf123.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-d4dcf123.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9cf\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3CwNFl1Bpa1khjCsoVu1mX5jGx0f8Y%2FaE6c6xqPNKv069UV9h7Uy%2Fd80FwDdQZugoo%2FAKYuO3rrnBvdxVAdyFoWDH6xV0c0RX%2Fxjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ea81cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fb575795.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fb575795.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bdc\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQk3wQy1sR6AdTmIt82oyf78%2BdnHEmO99Bp1OubGodbDd3qVmL1SOXsD24QKC8lU9lsmXckGaCp29rlfM7rBldv9cao2jmiJaE%2FsfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ed828b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/w3m-modal-a765f42e.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/w3m-modal-a765f42e.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b44f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgXxQD3fvPR5v2XlaHJUN9FvvRZ59NrBfHY%2BFCF7DQt%2FbvDZqB3hm4fK0wVk416KQ6P86caBNXA1Rdw1p6c9CbP78zToe66Pu8Dxpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9f0840b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-ad8\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw7YzRzVkn%2FbE84itG3FtVg9s5F3bLimrYHgCQSg4zweGx1kzqr%2Blt51dmtSlZkPzFtHVLskj4JjnC1qZdhgzffqPy0qrq2bQvYEgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5c9c8b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-05-31T17:09:56.226511Z","times_seen":27,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcea21e6cf527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-06-03T10:38:18.390816Z","times_seen":357,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":102,"dns":1,"connect":10,"send":0,"wait":20,"receive":2,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-3602d8eb.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-3602d8eb.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-18a9\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBipwqdMSVaZt4eX5lAEihfSjaBY3db1s12godt%2FA2J7aaahrBEx33ZtKmY8mR2%2B0b00QN2BxtuqLrRVOFt591n6PaBt0McSqWQuAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e9818b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-a147cb61.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-a147cb61.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-38263\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0opcaNBfxgjL24DNgBCYUh%2BQB0HGVV3zG4sVPwUNLAWjUR3q4xDZzlyXG1t%2FrR2LQ7JgKIyPtxEGRHXHeT9u5jQ36diuPsVoB%2Bg7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ea81fb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-458e75c8.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-458e75c8.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-774\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXg5j58EmIml6cqNE7D80u4Q2yecH5BLxETTiTZwxbVQkRv8mihtAwPm5DLDegXbE0cJ1K8JSUg9QkoUios0UAz5NOEhEWV%2FqWQ6rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea09886b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-b8f4bc3c.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-b8f4bc3c.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b3df\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2WjeFtwncadfFxhy2DKkFWKylQ%2FRKKCC78dmpWTTJWieegKZerCIn4TLcjMiM5r2msrGyRy%2FxvsMvcxz3XrZ0CvZMeAsHK6%2BsEjzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0b892b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-23a43da0.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-23a43da0.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-127e\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcMmJYsg%2FLkuFqUjkRp01GjgADEvVq6Uj6TwYjyyIx8A%2FEGJWu3b9c353UxF4%2Bh4q9yQ6QHvKx0mi35nYi63WhuW0QA4DrckR6qF8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e8813b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/receive-316eb367.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/receive-316eb367.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19dd\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qc0Our9%2BmSB1bldqxTUiBux3mN6E30rH4bxLI%2FA5iuShSq9zaWDslT0VFV7f8KYw6ja6p5ISW%2FlBFupbmYhnniPZ8w%2FFK5jwT2yWeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ef83cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56On5FtcWlJNHyGfJraaMJQYJFGiM0EyNS4Mqw9StS5LuhxBld2ZZnvtQP5wLPRFhNUavWsp4J4HFlzR1k22%2BnpqAChHioBvZx0kbw%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdce9f0841b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ec5fd8cb28d9903ff0a65cefb17b374d","sha1":"2ed3da7dbcbac9ac85b07f950c9fcd8c94a9b1c0","sha256":"cd9a110ddd4079a9c00e21bf6c087951013a987eadf1915aaf6547296ca55d12","sha512":"8e155ca497471aac9959177f581b6f4a58474239d07b1e4ab8e640d6df0029b3f94c8a2671dad8e9aa560ecf213b9034d0f73b23b3f112699f141c22b8336fe9","ssdeep":"192:DhtrbfDgn2heWvqQup79AAxb1ZKJgxnibTbf:Df8T7fx5jI","tlshash":"8bf1c74527715bafc120a1c21cd33bdc586f25a22cd60b46a5ef9eae8314dee3123726","first_seen":"2026-02-18T13:18:17.67666Z","last_seen":"2026-02-18T13:18:17.67666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-d51bd663.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-d51bd663.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-12eb\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5GcZ9gV54elXG%2B4ukL9rG%2FLyCk57MxamtxQ2iOf9XhWlXMn7AfSiM4IcJxCDxUvBfhd1A5NKo4VH5gM32l96K90tmgW0CwGZfN1mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0386fb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3090\r\nserver: cloudflare\r\ncf-ray: 9cfdcea249c31525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29162\r\ncache-control: public, max-age=31536000\r\netag: \"cfmK10fIs0rtXK3D1w_qZdnstVfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=653+4 c=0+3 v=2026.2.8 l=3090 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8e093ad4a0e0bf420966897e5d52611","sha1":"90172a764ff649c9553d8e84ada46adcb73f33ed","sha256":"4a00efea74245ceacea37a3e83f0a4a2830236143357d3c57e96c4dd154d593f","sha512":"50b07fcc6d1c5460e69613f4509eb8323b11b6634ea8f268bf541eeec6271bfc5852200c34f385ad82d44c3e3f70122e783f1669d9d356d65be4ee82a20d6546","ssdeep":"","tlshash":"d7515d250e57bb7f0fa7793b2e97c313955320052e06b200b624f75101940863bf35da","first_seen":"2025-01-22T15:25:28.982905Z","last_seen":"2026-06-06T23:54:12.738641Z","times_seen":1141,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":116,"dns":5,"connect":1,"send":0,"wait":89,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/index-a167d81f.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:50.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/index-a167d81f.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-5008e\"\r\nexpires: Thu, 19 Feb 2026 01:01:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 983\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFiosJ8z3X7kbJJ3G3tgQ%2BAIgjb7pIigjgysh2Uhn11Mw81rbgizQweXwObjosmmDGCYvHrt9yrfHvhDpqgfI%2BvSwEIu2RQv354t2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce949de3b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2d09189a49549645194cf0b3b99fb96","sha1":"6938d2e35b3c9cb35ac93380d467c456107b57ad","sha256":"a167d81f47a399c1b5d31c91b3ed423e76f169d53319cfa73824284309d3ba67","sha512":"e23dc771ace21aed0d2a95e8b6f8e8bb365ef088a4481dc8df083954b38aa2ad519a39d94c720b477a9c4fc124d1021b1bc1b0923c70bab5eecc540cd853da33","ssdeep":"1536:OFsJM2FDrx3WqyrtpqoSWEDZsIyNBi3MFYaQj73rx3WqyrtpqoSWEDZtKCE0Zz1V:O0DrxmNH9yDuN0rxmNH9yD+Gfj0+","tlshash":"5b64c36aa690527cbf17faa497ce96d8f23ce5b2dd01dae8f10051184fc3bf50663606","first_seen":"2026-02-04T16:46:53.775438Z","last_seen":"2026-05-31T17:09:56.211542Z","times_seen":23,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/index-64018b0e.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/index-64018b0e.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-108e\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EyvIjq88CQLooyHbbgn8XlEKycdVKnYCdhId57qAkv3NeZd212II6h3t9KEhLMWnRlbR%2BuU9rUM66WuZuA1keBRNz4lYjI3rG15jwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9cffaeb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4237)","md5":"3c684af8b172bbf98c9863dd2dc7db9d","sha1":"f4d6852ce2e2c7aaecb3b7adf9307a836822b2b2","sha256":"64018b0e7980220a7dab8725807c61cddc279c9cd2b2b99e52b8a30dd18ea7de","sha512":"fbd99a64c8fd263ac3484229eddce1ccf7a6627eae44f99318d0588132f8eeb196487a4b97de590f591991becd18e48e46b64302bdbf73e22930ab479dd539cc","ssdeep":"48:FlF1D0mm2g1lMQE2imldovbJevkdFGVRIR8/FsvrS5eR6YShFQCGvRjVjmrT3xYj:7t5dFS24F3526Y1CQ7jgThYcfhKn","tlshash":"1591cc3bb18df6086077db91f3d17688925de523a2c569fa540c286dcfc3e8127b1369","first_seen":"2025-12-10T07:39:13.865038Z","last_seen":"2026-05-31T17:09:56.247638Z","times_seen":34,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-9a611939.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-9a611939.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-141f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5Jd8z6maR9JKVPGhW2vkYbKClF%2FXy6Y2yYV4WnXOfYCnUiNvxosvrpgI28DORr7uTWvuqpBB1L2GighgZmMtblwDkFaT7OHaX3Jzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fb8b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-78a86ef1.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-78a86ef1.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-162c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdsUMBQsUHbuyfETbsHOQrgaMIcU3YGgEUEV2Y9f%2BmmR%2FXerPIYlNwMsNRtcxSmXrirI4dtT5biM%2F7zDsvP16GhqQm74UA%2BSShVwGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e4800b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-7b62a5ba.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-7b62a5ba.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bc7\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ag50F5gwPrhLa7ks3dfMIqHNHbF279rDEwxg5d6zg3R1HTUafEq8JqrYo%2Bu7%2FGuGh1T3p3DMJVuowG2JAzHeZw3LeWE6NFWyrZxVuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e780eb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-7b62a5ba.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-7b62a5ba.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bc7\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sG%2F%2FLQqupdN7Zvq2pGM7Nxg2zRgFnvnSV%2B784YURPytOsPmuDn3htV10oleCPSlGQv6Lc6r%2B1ydSjuqt%2FAPDvXw2%2FIWytGOi4VO8%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02868b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-056337cb.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-056337cb.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1046\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsvCTaKOFuN0kvcUe6g%2BXd7hdvvwda9l1Yg%2FTxoF7E10e%2F3TtPrcKnnML2%2FC8YhkW3EPIwmJVpVAKmdtJPzJ4F0ASVaYvbRmIM2HYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea04877b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fe82323f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fe82323f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-593\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yooNl%2BvhE%2FJZ%2BZBOovekiruq%2FAJY1B%2F3qE0uiZ4h0xtwx4scXnYtXMHYf8ebtJUP6nhNSocPqczeoQPJbnjSFU358tcvuylIqTY%2BiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0a88db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-67b7a897.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-67b7a897.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1008\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLbYjZHjM0xDdK7x4ZoSk2Jtyus%2Fu6A2VN%2B4JpUw67Bmw3XRVBc%2Fkvp7yf%2Biu54oaJ9%2BemIkVNZv%2BE%2BSGDWH427KyCdzWpUdWuNvPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea02867b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUJyzZZ0ev08Cx1mQXOAvVtCPO3e4TKoDWcY%2Byx0IKCS4hJOWyMdALE8byQaYtnGFYn1F7ICwhwxZLBtpTQ6NDFZ6lHawZUJ6KS51Q%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcea0e8aeb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ec5fd8cb28d9903ff0a65cefb17b374d","sha1":"2ed3da7dbcbac9ac85b07f950c9fcd8c94a9b1c0","sha256":"cd9a110ddd4079a9c00e21bf6c087951013a987eadf1915aaf6547296ca55d12","sha512":"8e155ca497471aac9959177f581b6f4a58474239d07b1e4ab8e640d6df0029b3f94c8a2671dad8e9aa560ecf213b9034d0f73b23b3f112699f141c22b8336fe9","ssdeep":"192:DhtrbfDgn2heWvqQup79AAxb1ZKJgxnibTbf:Df8T7fx5jI","tlshash":"8bf1c74527715bafc120a1c21cd33bdc586f25a22cd60b46a5ef9eae8314dee3123726","first_seen":"2026-02-18T13:18:17.67666Z","last_seen":"2026-02-18T13:18:17.67666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea249b41525-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6\r\ncache-control: public, max-age=14400\r\nexpires: Wed, 18 Feb 2026 17:17:52 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:17:45 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d624ae72d5da08a9698cf19ed1004a52","sha1":"d2da4fc91b5567dfa523c551f8b8501b43d0384a","sha256":"68df83e68b02e91713d9e5b52a22c297d98ec2d5acda0c37cb47162547cf35db","sha512":"90aa31b4915827753f86420e7b64e4f7685df1bf06908974128eb66b8699e549781120077589005dc68e9fd726c8904fb322695755e997ba1dd28a0b90e77d58","ssdeep":"","tlshash":"9a90020520487596c052c631c21157075d258e732d1460345025090990bb4750841823","first_seen":"2024-07-15T21:15:20Z","last_seen":"2026-06-04T13:32:30.782605Z","times_seen":454,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":119,"dns":5,"connect":1,"send":0,"wait":100,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea259e91525-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1068\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Feb 2026 01:17:52 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:00:03 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ff81d78aa8fa8bc91964cbdf56f347d4","sha1":"65a9cc56c6f09774260f21505e5cdc796a30f1ed","sha256":"469d53c47aa9a2f37e2633aa03758f21d5d71207c27a271ab030f777c0ce4691","sha512":"551a57fc4333030d5a28e51c50441b36c6fc9fbbcc2e2a44b93c023905403888b2273f517977633dea41b7ea74da0407a015aaee8e11e35ec41def86bba72abc","ssdeep":"96:NNbhiWUmyvx9JwTUmo5OlvoyM79hT4bRQ8osJohKlR8iqpmavlT:UwyJv4xo5cwb78V1fJl5ZadT","tlshash":"d0c1315f4bd0adaa8f34c784f56cf9eec52ee007c1ccacd9a5b0893541fe4a76641126","first_seen":"2026-02-18T13:00:30.991462Z","last_seen":"2026-02-21T20:57:40.309116Z","times_seen":12,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":120,"dns":5,"connect":2,"send":0,"wait":96,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1020\r\nserver: cloudflare\r\ncf-ray: 9cfdcea26a211525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 37126\r\ncache-control: public, max-age=31536000\r\netag: \"cflmU5jeS0gZTTUT6JXX89Y_wKfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=395+2 c=1+1 v=2026.2.8 l=1020 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d08a4e1724ddbbaf3ee6372a6cc5dca","sha1":"ae18af289498c86d780f29f792e5dd1576239c87","sha256":"d1839a6158939a008a3bed2480ae5fc4a3ccc818b0bad78375758b5da90ebdae","sha512":"fcd457f698b2328da1e36faa98f33e6c5932ee3e3038d64e1fcd49cd3592ec87c57f17c4b751e258a0f2b6abb645d1ef840c73ef6d1e2bf617319faf2369d6c5","ssdeep":"","tlshash":"da11a878a4171e44e1712f1699ee33e9dd263c5648dd8133f062e6904017847a2383df","first_seen":"2025-01-22T15:25:28.962767Z","last_seen":"2026-06-06T16:23:41.295336Z","times_seen":1178,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":125,"dns":6,"connect":2,"send":0,"wait":87,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bsv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bsv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: s1X/wUWfO+4FNLNe5xl3XV6GP9+lDfrFJxCKzqS10a9keuiWNwdumCqUULIRhodmAnmMaZn3UUU=\r\nx-amz-request-id: XZ4YDMF2H5VMX3P9\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:36:30 GMT\r\nETag: \"0a6c14a948ec11e6b3bc19ae2aed7c22\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1817\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a6c14a948ec11e6b3bc19ae2aed7c22","sha1":"0f79ca42c47a7a37253f23b608fcfbc2493dd84b","sha256":"fdb30ade7093c96b4c5968e4a3721388c3be1e0325266645f40a995d8667486c","sha512":"3d6acc8ed9dae0981c23574fb5319dc64591b22082392253e9da74f64832f45cafd2db8a652d40478edbf2752c22576938acd4757d6ce293c34653b4e79e8233","ssdeep":"","tlshash":"78312555a370f368b904b3f8d36494b1752664fbb253d50896fe2125fb4881e0cfb98b","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-05-31T17:09:56.287656Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1981,"timings":{"blocked":799,"dns":4,"connect":389,"send":0,"wait":376,"receive":0,"ssl":409},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wnVLOqlZ9AAtv3xQ5arx56mZDLwudyFW5hvhv+pIfvRF92ZeU7RvxuvtWpPx9zAoBwZS9re81P8=\r\nx-amz-request-id: EQNDVADR8RMXSA86\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-06-02T08:10:02.659224Z","times_seen":585,"resource_available":false,"data":null}},"time_used":1560,"timings":{"blocked":1166,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/mnt.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/mnt.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3R0ib/vB5ei/irTladizUMZwVhVGBL/N3juk1BgsFDYKIqFVCqZIRBQ7gZmRLeGUnX3RMz3bIA0=\r\nx-amz-request-id: EQNFYG05NEF1N0ZY\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Fri, 07 Feb 2025 08:50:51 GMT\r\nETag: \"bfbe6b0405422cc264680437fefcfb96\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 29193\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfbe6b0405422cc264680437fefcfb96","sha1":"c6b51299017551415982de1d412e90d05d7d84c1","sha256":"0a543865636f37f781adb998e145a6ef5a8c87c9fac6a077fafc3c703e9a8800","sha512":"9930d3e7941377d680207ca7b70da191463d20e19b6ad4c85a47f0ed1ffc2797f45675c488d8f411f26fc60a9682285c826c4deacc2e563042d0e92de48104ff","ssdeep":"768:gEBJN3nmxAwTxC4nphzFZnToJu2yN4tIzh2v/lv0lahA:gE5mxAwTwatFuDyN4tIzI/B01","tlshash":"26d2f158535aa13fb7d822dc3ac7f826f32a518cb180f05227d50c66633ad872d547d3","first_seen":"2025-03-06T11:30:53.668336Z","last_seen":"2026-06-02T08:10:02.669946Z","times_seen":180,"resource_available":false,"data":null}},"time_used":1899,"timings":{"blocked":1307,"dns":0,"connect":0,"send":0,"wait":307,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/index-21b53c44.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/index-21b53c44.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1b4f\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLOO39ZJCkrs9eWHBoQ7FwhbQ3gSCjd7ZfXjBBdOeTLvRN6lXZ4IRdY0HEGmoD%2FgJfvesquN%2B936pL5RJZyAPZIYDu3PYYiuGbAliw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9cffadb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6990)","md5":"4c5be293d21e28e6defc1f29ca14d0c7","sha1":"0519ba50e2bad057e581c8656f2931735c9ab39d","sha256":"21b53c444ab715f26559331069112c974ab29f75c03f3e886da16d426835b429","sha512":"34060427eaa86c6e8a53065165954a217a76002118f4e42ffbc5d9ad9d68ab67d3f2cccc7fafb347108bcd069ce0f5e8bea4f5b429f0a6173183949a9e3c5cf1","ssdeep":"96:xuUFdLcu/dhPG3OMj2s5LqOsXzmXOX5Xis:EUFdLd/dhPQzas5OOsXzmXOX5Xis","tlshash":"2ee10d27110a2208f233ce8857e4976486b9e527d20616ed62713826cfd7fc727e638f","first_seen":"2026-02-04T16:46:53.860881Z","last_seen":"2026-05-31T17:09:56.282598Z","times_seen":27,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/home-63fcf511.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/home-63fcf511.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-51ae\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzpIYWl8hzODb8q0JxKfW6QZUu38o2w6eVhfDDhNcmLiJR%2Bq5KWe%2BE04OQrW6DwHWeFNBiq3b9l2b2q8MUFLN%2FwEnADymJL%2BZiSNeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fb4b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20909)","md5":"e1a77679fd99e12512a35232dbf92aa6","sha1":"77441572a20128abe7782df6c3b89838eebf6789","sha256":"63fcf51164f4fa3b19d1522f6188ce6457ee8cfd82b92cc35c8d58eee9b6e6b8","sha512":"54286dd64ed38c4589bd5550b00b5484552b25d4a38a4e81cfd740abdd179b257888b58932c761a63dedcae7192e97c9f5ca7306085e92404a310dc5f7fc5d5c","ssdeep":"192:qkMJJ0w3boMvGOYRiwvkYrIonYSL2U93/tG8lUQ+iNCZp:q7ByiwvkYEonYifv08y4NW","tlshash":"0892317b220a331ce137de505be91254a328d533e21226fd5465792acfcbbc222f675b","first_seen":"2026-02-04T16:46:53.772916Z","last_seen":"2026-05-31T17:09:56.256005Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/if-defined-49fb0c54.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/if-defined-49fb0c54.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 981\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHIsVxe5iG8r5w7UZMVTPzORCENdT6GlOmhAvgarQooGvaxoM%2FGYE0Iou83AW9xWgOrNXrALqGl9ZFpG9AmmbRu01Pmvy80tjH1rfQ%3D%3D\"}]}\r\ncf-ray: 9cfdce9e6808b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea23ea2f527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-06-03T10:38:18.381701Z","times_seen":320,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":109,"dns":0,"connect":9,"send":0,"wait":28,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\nserver: cloudflare\r\ncf-ray: 9cfdcea47ce11525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 56050\r\ncache-control: public, max-age=31536000\r\netag: \"cfNST3q60e3DEaxemhB1mMC8dRfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=10+4 c=0+4 v=2026.2.8 l=1264 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-06-04T13:32:30.752112Z","times_seen":513,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bone.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bone.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: MvVK+gzwxQuqBB8CVFhpIUv6M+cCP877MTFKhGAdSPDGEWG16plECisz5U/uGxsgjG6xZOpB3n0=\r\nx-amz-request-id: EQNFA7MAZ1849NDR\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Thu, 05 Jan 2023 05:37:41 GMT\r\nETag: \"3c335279a6cf73c3947a05b71e83ba1d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 53957\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":53957,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c335279a6cf73c3947a05b71e83ba1d","sha1":"b59ad0c11cec77b11ce7b08ac3f244e84c2ec0d5","sha256":"083b7872dce2acdfb2dbc4bbef367d7545e5331ddd0d4dbe86c50d770e2b776e","sha512":"0b00f82985185f1577f14be2e3cea878ad7e8c7ad03e51a2356304aa1816ef61e6d4c067a2becfab32cb11d8ce531a5519714fd178610ea7d598bbe97ae8e5a2","ssdeep":"768:4QIFYPg2OHJMDmqsgVnRd4sSUT0A40ZK4lkULDR5Cf0PNsUaqqvavAbItNsELv6:Mkg2OHoVdH2swA4Y3ZVsUaqmaobI0Em","tlshash":"b333f19b0e3f32bf0c35391a51fe22570b5f2c9c925886dc5a089949721bb243b3866e","first_seen":"2025-07-05T16:42:06.938712Z","last_seen":"2026-05-31T17:09:56.200415Z","times_seen":74,"resource_available":false,"data":null}},"time_used":2087,"timings":{"blocked":1501,"dns":0,"connect":0,"send":0,"wait":300,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-83e\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bT7woaILi14aYrBV5UImr%2BtBGMKtrkgydtwOCPMAKgQYazsOJ2Z4n10crKjjYTWtRmZ0Mlk6jfYqr6gTKt5WU3wvw%2FfKVrCpJlk7GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5f9d6b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-05-31T17:09:56.311751Z","times_seen":27,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/v1/api/config/platformConfig","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:50.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvRq%2F4a9CY1IpkN4vsfp5KFeuWhZLAqpxmisBKAwolxu80MaxNxfo2vlk4eQ%2FATCk%2BvlN1pfqZLCp6RAyn724Xc8kaY1%2Fz%2FDgJdOrQ%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdce99bf34b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1e320c051ca2af982cd7895c9e1bb81d","sha1":"1385cfcabf9b284e0a34a552a53321b43f733e11","sha256":"696b21931625526fe4c3c1f31828417bbdd19ab42402f23c0c75131e02b89c59","sha512":"cb0cb799358d9274eca176f04530646bb1553321bc09cc7a09c5ffab4be0a12ab17abcf06aa49e265ecaf910d557313670eb254b2dc66fd70efd65bac7029b11","ssdeep":"","tlshash":"3481518e372ad5b8c6e415cbd4d728190f79a9da6844f44fc29bec683ee78d13128217","first_seen":"2026-02-18T13:18:17.646723Z","last_seen":"2026-02-18T13:18:17.646723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/css/index-3cd34980.css","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/css/index-3cd34980.css HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-6bb\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ULsJPBnpRl3UOsbWNBJ1geeyV2YHA3sBsXYCanzXWDa9Bi%2FpVOAkVyiH3V0w5m0q1eV5%2B2A6%2FCq%2B3CBy3VNSw%2FOs%2B5GnvMu9YB%2BHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9cefa7b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1722)","md5":"8954e8e993c0cb85e470210a616216fd","sha1":"f7c0e384e8782c24e248cc13b4b9bd2394e779d0","sha256":"3cd349806396c6cbd9d6d50d68e9c265823560f0e9402ac67009406e9dd034f6","sha512":"83edd994300f5877052174f1ad511ad9e75d0d86d510478316925da888a7ccaeab1b53e15d0635be48422bb28dc41439b3374aef940c54d25fea70442669b41b","ssdeep":"","tlshash":"2431252ef6e063385e3e697057da1dd4e33e84208d629094fd62e424cac76b202729e6","first_seen":"2025-12-10T07:39:13.890273Z","last_seen":"2026-05-31T17:09:56.363951Z","times_seen":33,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-36ac775f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-36ac775f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-716\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2B%2B6k0NwJPbv9UenvY6ZXBbyUrCvKfQjOlJapZfF00u0f7QzZAt6314hw%2Fi4HPXVa17CmeduFy3Nn2Igy1vH%2FJPhXGahlNSv9%2F6Pxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d7fd5b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/HelpersUtil-27422063.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/HelpersUtil-27422063.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c7c\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4TOki2xwZD3gjOYuRcqzWw1rKXuQyywOFfO5G1dRkvQfuvfUR4i5XISv89ZI%2BZIAYBgw9gLilooYcBl7dQPbMhfoqb8OQ%2F1mtGXMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9eb822b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-b8f4bc3c.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-b8f4bc3c.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b3df\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6yIOyxQkVO8d3muPHYrBDYcW7ljk14er49L7fuLGOH8HAdrIO2F3Xs4gDnR2Lg10AZI7yFzSoj1h%2B7kiVdhBiIXUxFYc1WYrq%2FxVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ee838b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2973\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: 9cfdcea24ed8f527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-06-03T10:38:18.40552Z","times_seen":320,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":121,"dns":1,"connect":9,"send":0,"wait":22,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:18:06.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:07 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptrX%2FZ%2BkECXWC1Q72RDgzzZEU2erM%2Bnzgdcbv14wfkwHoy9lbsGr%2BCa3d3dsy7lMxMYxpqovRde1pBUrai3o5v9Sisz2TRhmkgcBUg%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcefbcb7eb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7826,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bd75edb9dfb38998d4f6b3d49a37cbb1","sha1":"b24d0da2d8551586ef1979e5c5ce75a303a1376f","sha256":"2dc95d3ff5a41c0a4e7f6cc8f92207cc3c64e43b4f59ef0d9447b7323009ad8e","sha512":"b7388393423d98e02889a24caea2e430a18cb1c5d8bc1a40097b60efd5f3296d6bf76985fbde88488ec8275d044c9cc102b2269a0dd3fdd8154353a34cd661dd","ssdeep":"192:DENKbvZgf0qMhlv6g8Bw9jCp3u0IHeqPiskArj:7vZqw1Uarzj","tlshash":"c0f1b74527715bafc120a1c21cd33bdc586f25a22cc61b42a5ff9eae8314dee3523726","first_seen":"2026-02-18T13:18:17.692605Z","last_seen":"2026-02-18T13:18:17.692605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":504,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/VerticalTickers-27d43059.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/VerticalTickers-27d43059.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-59ea\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFHDCcbbmtl2VufoV79GsobuYqmPpNa2JkzyIyRr6l1DFEDhpKJAaZJjoRFVBBYce3epDXgGQvb4uiRlXU9qjFXomZ4YAmBaGq5yhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d0fbab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/send-7c4c9d57.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/send-7c4c9d57.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-8337\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59BVI6OgoEtB8o%2BVdwktjXmBUPrAXPN0EzNN2H1HMAcv%2Fp5Qp27bMhPoZv0PwAGgsWITopp4tDtlHsIPX7BeoPeAQsNoNdY4IFSedw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e3ffeb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-056337cb.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-056337cb.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1046\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwmmOfwEHyAb6rmbBszHQa0%2FPO55uboTF2d2zlbnxyiPya3vAkW0N5vK2eshkPy1Q9AmJXicn6QyFJuhCOMyfhM6HLFwDE94%2BJ1%2BSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ee83ab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/SwapController-128e9645.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/SwapController-128e9645.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-35f8\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsk3XwK6FMdCC8QXgnEJeZg%2BYQIVArVIxZdeNHo%2Bwy9z6Jj37p0vT%2BLJxKsy6tOYsWMiv%2F%2Fheq6Ni2A2uHkA4xgCDwGOd1sREUBPOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0286ab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fc1e2a83.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fc1e2a83.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f2b\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=As0DWZWnSaiIDq6B2535ntxIXK0Kmdtv3Z6RxhtKeT%2BAtSN84dvr9Eoo6M9OaASmb9Zqmgqd%2Bma5z7XfnnGWHWBZO7mFR08QKgYZAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea09888b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-5ba2403b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-5ba2403b.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-104d\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHURbUhOSj6%2Bkx7o8buKImh2M56RMM5Kxc9NSUNEqGE%2Fy29scSW%2BT8qiv5QQL6B3HpHXs6HSsO7IWh8qJQLYHmoMa5pAklJVoNKTPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea0a88cb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/home-f7f6e3ca.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/home-f7f6e3ca.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-58f3\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PO%2B3XP7T9x3znt691prj4w8X9BO5Kga8%2FwYul2Ys7rYcKiMLB4987KCeVs1Lmtrx13gPjgWo0TWsrjBBrX4xA6QCeWiaQSOiO2Id4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d5fd2b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/VerticalTickers-27d43059.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/VerticalTickers-27d43059.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-59ea\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYVsp81lyvjW1zuv%2FUtgYNfOIrO%2BpE2GEGHhTXbauJGE5rR176T1Pcq0Zueo0U2n%2BFTBy8rlhk94PHZKSkrr33N13YV4%2Ftm%2BdC8OkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9d7fd7b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-d51bd663.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-d51bd663.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-12eb\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fY6TpjQXyZUYDLcpXZZZ2cvfD5auZ0GjyfFQN%2BfzQyU9g6g%2FvJmku%2B1d2ODFJ2CJjYyz4f%2Fe1ae7EOhwod7rN3ihqIcTdWM2FeTSUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e5802b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-fe82323f.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-fe82323f.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-593\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COHgh6zJfVj66Yl8Q%2BiesucEl3NlClj1Ouxxb4%2BbUpe2KpLBphfkYel%2B78YFasIqWcS2DrDrhE5MAoNpdjOGRB0BJAGO%2F0tUC7qYhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ee835b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/\r\nOrigin: https://krakexn5.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1992\r\nserver: cloudflare\r\ncf-ray: 9cfdcea47cc41525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 73244\r\ncache-control: public, max-age=31536000\r\netag: \"cfctNhB4Bi9Sx1OSjZpNEcxaPsfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:17:52 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=9+6 c=2+3 v=2026.2.8 l=1992 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-06-04T13:32:30.785171Z","times_seen":551,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ordi.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ordi.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IgPLvN2Ry/c3uYXDNmAno8m917z0QIO8GGoANjFNa6tZ65ISEnw40KmA5WVu0Ggg95MGkuIVpJY=\r\nx-amz-request-id: XZ4SXERKAN4NNS9S\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Sun, 30 Apr 2023 12:50:40 GMT\r\nETag: \"be20ec57e8a4aa7b2a338e48acdce782\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3560\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be20ec57e8a4aa7b2a338e48acdce782","sha1":"141496897f907d601a749439a82ad40d805b2294","sha256":"35dc8d4477166c6aac8a1e3635443f93eddcf22f95f297aeda99b6e453923205","sha512":"43ba6eaa071f9abd823afe2c47cfd814fef95a73f89f3eaaa13fcf1589c5787bb2656a0018a394af52925b6063fd5d772d21bd5e99c5d3fb9797c538994b0bef","ssdeep":"","tlshash":"e771b5d452ad91e2fc43d3d6dac2115a787260a92acb8064f6ec5257af390eb4407394","first_seen":"2025-06-19T20:00:31.917814Z","last_seen":"2026-05-31T17:09:56.31862Z","times_seen":148,"resource_available":false,"data":null}},"time_used":1514,"timings":{"blocked":599,"dns":10,"connect":284,"send":0,"wait":304,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-bc8c8fdc.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-bc8c8fdc.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bcf\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x81fGnR%2FNrNdMgTax0OmGbwabVMnKNXq88nY1%2BVGBtOxfu08KdCbb%2FBkDAGB%2Bsdz6LFItNVOtRejsVkdr7htjbip%2FdFdp6gqv%2FzSPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ec825b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 982\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7y0H6QSBXpvtfF0D%2FiUagVjvYRcsA0ChbzBD8CNMLReJw7otJ6KSL6sbJMZYIXLQPKk0l87DFd2dD8RWQqRt%2BoISlq0NpzXDjdmOjA%3D%3D\"}]}\r\ncf-ray: 9cfdcea0b88fb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-06-01T16:43:01.277185Z","times_seen":48,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: s20hdebQT776msxp3BSbBgSZ/0FidnlckkXSUlX+dwM7M9PHI2v1/pWkfvM7J3mOWlDmqPeNsEo=\r\nx-amz-request-id: XZ4V8AADD6TKYYBS\r\nDate: Wed, 18 Feb 2026 13:17:54 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.034886Z","times_seen":471,"resource_available":false,"data":null}},"time_used":1532,"timings":{"blocked":615,"dns":10,"connect":281,"send":0,"wait":303,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-cf3\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhFmPx6LuSm43jKyIsg41koBE7eo783CjXZ9ovMyA%2FcxbVoUU%2BHuCRgrhLOkg0vk05qlAaquQvvdx4wehS2XkG6nXMubdfIz%2B02InQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5d9cab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-05-31T17:09:56.262642Z","times_seen":27,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-ad8\"\r\nexpires: Thu, 19 Feb 2026 01:01:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 981\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zydeat51Yp0r%2FlvlSbiDTSKHdYqIvLl8F%2FUzBb2ihy2nTlzl12p04kGrEbBa4MKdcAK2%2FvA%2BvD3dtXHfu4AguIacY9Bs35frNSRx2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcea5e9cfb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-05-31T17:09:56.226511Z","times_seen":27,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-67b7a897.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-67b7a897.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1008\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feU2FzHvGKShVQ%2FxLXneMvN5SOM8XKgFFo78orXA3eCEjYxPPRz%2BXOoETiBJLakIRi59Fl58YxD4%2Ftf4h50ggrNN1ZbspitHfz8Xfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9e780db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn5.vip/static/js/index-5ba2403b.js","fqdn":"krakexn5.vip","domain":"krakexn5.vip","tld":"vip"},"ip":{"addr":"104.21.64.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:51.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn5.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:20:46 GMT","end":"Mon, 27 Apr 2026 13:19:20 GMT"},"fingerprint":{"sha1":"C3:FD:1E:9A:CD:A4:57:49:6F:36:0C:9C:08:35:8D:07:45:8A:85:21","sha256":"34:84:65:69:E1:FA:AE:14:5D:31:B1:8C:67:08:82:DC:9B:34:2B:94:6C:EE:BB:42:99:0E:3F:CB:E8:8D:CD:A6"}}},"request":{"raw":"GET /static/js/index-5ba2403b.js HTTP/1.1\r\nHost: krakexn5.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn5.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:17:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-104d\"\r\nexpires: Thu, 19 Feb 2026 01:01:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 982\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DzSySYHdDx3GayHcdq1gd6nddcvsUzXfB3ZR%2BfhqNg6tpuMSV%2BDr2EByF8X3U%2BapUbQ6RCjV5kj0bFmDYxiW4OH3dmNqi1qT9%2Bhadg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdce9ee834b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn5.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/id.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/id.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3U8NkGFOsmhDeB8jZ+D/HRz2UGGjrwsQwa69yWNOhOL25LXV3JtomQ3drfRIDzuvoV8fgyREYbg=\r\nx-amz-request-id: EQN0961SQ1FHR9S4\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Tue, 01 Aug 2023 12:19:18 GMT\r\nETag: \"814f626fa5df0816a76957898ab17546\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 66185\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":66185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814f626fa5df0816a76957898ab17546","sha1":"5fe40d5015ddd6555acfa862e868247c8636c858","sha256":"16c5691b1435c4f30f2a171870789b914983963f2b84a4e225e08e6ec11d16d9","sha512":"4e89a4240e47fd80f3b00fc08589f79c6c60ad797371024f769728db2681f82aa1c8d61bcb1bb1ac3b26ad8952608589d4eb3ee98a29e2c684bdab6a9b7d1477","ssdeep":"1536:rERrqlUBeQM7hGVseI91rW4Fws/2iNeO0A6oVI:rE8vB8VsFrW4FwG/oO0W2","tlshash":"0353cfc39f979f67454ee30e694d604d2d1cb9f3baa260986e8d8d83b44a8443e061f7","first_seen":"2025-07-05T16:42:06.921322Z","last_seen":"2026-05-31T17:09:56.238783Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1952,"timings":{"blocked":1166,"dns":0,"connect":0,"send":0,"wait":394,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.198.41","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn5.vip/index.html#","date":"2026-02-18T13:17:52.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn5.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: e8JlpZGg4M5GgsUs1/fO68qKNxLFxQDp3xd4XJL9fN1uhdmUS1ohN3C7k/LhRur/nnJJ5F/5n44=\r\nx-amz-request-id: EQNBJ8SVZQW0CH07\r\nDate: Wed, 18 Feb 2026 13:17:55 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-06-02T07:26:04.02244Z","times_seen":387,"resource_available":false,"data":null}},"time_used":1601,"timings":{"blocked":1295,"dns":0,"connect":0,"send":0,"wait":305,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}