{"report_id":"14f2c5fb-c7b1-47d8-a8fd-ac47697d5c29","version":6,"status":"done","tags":[],"date":"2026-02-14T05:46:35Z","url":{"schema":"https","addr":"krab5cc-ru.com/","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krab5cc-ru.com/","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"title":"krab5.cc","dom":{"size":3109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5d3c08b201f748fe23d9de8138e1d886","sha1":"558abbbbffd39470da77897e81ee5d99fae17e1c","sha256":"dd03b7a949ebea3218d1d73e20db544281ddf27604a83838277fa2b5ba810f7e","sha512":"4cd417cf878862b45ded03976628cac63433475ea9f34fa7a31f59345f40b6c1cedb22d6f4d80bb969acbc594043ed9488bce159b46b8a22a127a6b32484991b","ssdeep":"","tlshash":"125197d3e4f1649e10020172ad536e158dd4bc2fc7c29785b3dd4ea74fd1bd9880761a","dom_hash":"domhashbc120133fbbebcd197fd4208345ba7a3","first_seen":"2026-02-14T05:46:36.887948Z","last_seen":"2026-02-14T05:46:36.887948Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krab5cc-ru.com/","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:46:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"krab5cc-ru.com","ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-13T17:37:09.310765Z","last_seen":"2026-02-13T17:37:09.310765Z","alert_count":7,"request_count":7,"received_data":136934,"sent_data":3051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab5cc-ru.com/","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfe0a241378044b73ad30843b2d6d637","sha1":"1fec3aa735d7805bc67ff138e56db34e3cda4d93","sha256":"e442c9c733cd1d02f00b3afc48fb1a1bd097247d849e61b4ab8c9a7c749319ae","sha512":"f3a414995d7a17b9b8a3c40e7dc86ef153a02f41bec6e95f7c8fa5ec4f6a86ebca9e081d62560c956904526a40011fc14e8d15a21bd49497329483577569fb46","ssdeep":"","tlshash":"f5c09b154d75c135466758973531d26565a02018f452f09546dddc5d2421fd54d46c5c","size":133,"data":"","first_seen":"2026-02-13T17:32:15.25165Z","last_seen":"2026-02-22T18:56:49.602385Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed116ee6be96bcc2b6c6df4f65abfac","sha1":"13f5e2db5972adbdf0238d59523df7b2e528adc8","sha256":"2c64e646b409e61a8959f8d4aacda308928e89930278e62f974c1308939a457e","sha512":"40f640b9f9e9aca593a5498d5ad0519c99e740bfc91f57877499f2a2a048af9fde9f4771deef17917838c6245fe6d228fea9283b8a8d25377eaffa0837a8d246","ssdeep":"","tlshash":"f2d01297b2a611a005951193fe830b4c285cd116ed03c68e22886951cd71b3ed17db85","size":279,"data":"","first_seen":"2026-02-13T17:32:15.252827Z","last_seen":"2026-02-22T18:56:49.60352Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/script.js?v=1771047974370","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"282e506526152fcd4d2eda8885d442e3","sha1":"1e3e52865d2dd0c31dfc4b5a96563acf45aa87a5","sha256":"720bd8764ede3f9e06ee8cc5731fc7267f6fb5c807b310330ec1cab44c27c7bc","sha512":"8b91521f4de045ec6ef767f361c04a91aa48d571446f4f5d623426dc4bf590b2d2f49a100b4aaca8dc4deeebfa8ccbc7021a7391821d1b4a55dc277a98bb6d4d","ssdeep":"","tlshash":"6211dc3316b25de9205574bb9d4ca64cb5bf00ff3d8f53212a680ea82db02b44368e99","size":888,"data":"","first_seen":"2026-02-13T17:32:15.250083Z","last_seen":"2026-02-22T18:56:49.595452Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab5cc-ru.com/css2","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab5cc-ru.com/","date":"2026-02-14T05:46:14.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5cc-ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHv52%2F6yQpUzMNWOxwQoQX15G3KL7JTO82QqBZqSkU344jYhsdCw1kX0BIF84ehGkaWdocTi%2F8dlx0SmSJ561vidxoT8ubkO0elw90w7\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Feb 2026 17:04:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cda438f5c050daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-07T10:02:49.422781Z","times_seen":7435,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/style.css","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab5cc-ru.com/","date":"2026-02-14T05:46:14.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5cc-ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 21:22:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ba198-755\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2RlUOk6P0%2BAmHBaNUxqCXHHnbygxR8Fv6u6VgMIM0GvSqRZ7UNpVph1iF5vc%2FRqIklzIvoJClNQKq1D2ruCdv6SU%2FXFU4vDztZkc8pq\"}]}\r\ncf-ray: 9cda438f5c060daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"68218502c42292cc324abc99d101131e","sha1":"dab833d49fe946f888c2147593a9b290fe4f8921","sha256":"1bc57ce69e65b4cb8ee6508d568a428d59e008d1be5de9b64ad748d4f3d7d1a4","sha512":"dba8a24333b3d8c2fc3ce81887e74fdd663adfbf7519b840d2141339e712ae221840da22fcc72c0aacc7f0ee1244e51cd8e4055424f0056bbc3137af5612bf4e","ssdeep":"","tlshash":"9941aa922e9c0565b690d0bc79629746335e8173a30dcefd7ee4306ceeca3d085727a8","first_seen":"2026-02-13T17:32:15.24784Z","last_seen":"2026-02-22T18:56:49.592228Z","times_seen":8,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/5.png","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab5cc-ru.com/","date":"2026-02-14T05:46:14.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET /5.png HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5cc-ru.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 10703\r\nlast-modified: Tue, 10 Feb 2026 19:52:28 GMT\r\npriority: u=4,i=?0\r\netag: \"698b8c7c-29cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD8nJF%2BG3DtApdAX6rnUZo9l7ihINknM%2B1GzlZyarDU9SKlDYRr7O5RAc145mihp%2F4b5usUS7ey4xpMf3k7o%2FgYrVxDhC0V1%2BL1GeNYd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda438f5c070daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10703,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/14 23:14:50\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"4f05ca1121da273c532760ed96fbcbf3","sha1":"f347511b6d0603456191ef65e33c99f30e0fd8d7","sha256":"4fa6676ec9626c56faff6612b36af37f60f364a5cc2485e74da84b4ad2156f10","sha512":"2f37d053793b0ef40b7dd5c177dd085569626ce3d7938d1e3590c864fcb69d3fe90819fe60907b3994b3703dc5d48519236de62efb3032f3cc4385b58915c72c","ssdeep":"192:KSsyiF25Senrh4kXAG8JbVpZUMi8g5dRLJh2UPknl6Fu:KpyiTent46l8JB9Cd5Jh2UPyYFu","tlshash":"b522d00cf5ba6380cb6aec7686bdf633fad16db0fbd9444615db01af308c9060790586","first_seen":"2025-06-27T14:25:42.757693Z","last_seen":"2026-02-22T18:56:49.593757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/script.js?v=1771047974370","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab5cc-ru.com/","date":"2026-02-14T05:46:14.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET /script.js?v=1771047974370 HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5cc-ru.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXVoRySpQkkAg%2BfWMbxzmobh%2FkABXEegBv94wcO8tcBTojs1nL0u%2B8HtUIejH4m%2BvgF1XRyqG9unM602EguqYP1gaERCAKp5IY0ZSuix\"}]}\r\nlast-modified: Tue, 10 Feb 2026 19:52:29 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"698b8c7d-378\"\r\ncf-ray: 9cda438fdc110daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"282e506526152fcd4d2eda8885d442e3","sha1":"1e3e52865d2dd0c31dfc4b5a96563acf45aa87a5","sha256":"720bd8764ede3f9e06ee8cc5731fc7267f6fb5c807b310330ec1cab44c27c7bc","sha512":"8b91521f4de045ec6ef767f361c04a91aa48d571446f4f5d623426dc4bf590b2d2f49a100b4aaca8dc4deeebfa8ccbc7021a7391821d1b4a55dc277a98bb6d4d","ssdeep":"","tlshash":"6211dc3316b25de9205574bb9d4ca64cb5bf00ff3d8f53212a680ea82db02b44368e99","first_seen":"2026-02-13T17:32:15.250083Z","last_seen":"2026-02-22T18:56:49.595452Z","times_seen":8,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/favicon.ico","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab5cc-ru.com/","date":"2026-02-14T05:46:14.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5cc-ru.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 10 Feb 2026 19:52:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b8c7c-18c10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1%2F%2Fe687W4RNBpiOhSgWP%2Btp%2F%2Berwy%2FRa0oXFwvCTJwH6zC8pW73xFnMjNOE5we8JZ%2BtEgrrzTLA%2FB8TRLT7E7nGwsPrrKDa%2Bg5YkgZH\"}]}\r\ncf-ray: 9cda43903c180daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/2.png","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab5cc-ru.com/","date":"2026-02-14T05:46:14.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET /2.png HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5cc-ru.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 11277\r\nlast-modified: Tue, 10 Feb 2026 19:52:27 GMT\r\npriority: u=4,i=?0\r\netag: \"698b8c7b-2c0d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BFTovaPexpwRYzfxVugj73dABI5p1yRBCmwus0lRpjSBpnTEskMKbE3gwC9mMvK1PFF0WufcdyRSNl2urkBXpCY8Ny%2B1a%2FWGA%2F%2F3POt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda43904c190daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11277,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/14 22:23:26\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"19646020bad711b2f00b3ce6483d4572","sha1":"2e3a0c8af5a3547dc5bb00b31189064ece8c7bcd","sha256":"47d275a8beea760e854a7dc4ee132165cbf4d51b102e25641804ceb8de88195a","sha512":"61edcb7cec8c25141a93c1400073370b99607dc6e2adb9343badb4bb3e5f094aa4d663974e9ebe30fbc809235be095efc8023c44d42623b48abb9fec0ac0349c","ssdeep":"192:1sy6wkgxdbGw8Qkpba9qTheAQkmHe4DI+4+hqe0YKrO9sGxlmhpQowXhEC:Oy/HbGLQkNTheAjOtI+NhqVrO9O+REC","tlshash":"5b32bfc8e005cb05a933e6f6dba53e68a1d0f31fede148dfb1bbc2d56624951a15022e","first_seen":"2025-07-21T20:40:01.635658Z","last_seen":"2026-02-22T15:33:47.298028Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab5cc-ru.com/","fqdn":"krab5cc-ru.com","domain":"krab5cc-ru.com","tld":"com"},"ip":{"addr":"172.67.158.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:46:14.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:48:12 GMT","end":"Mon, 11 May 2026 17:40:06 GMT"},"fingerprint":{"sha1":"F8:0A:D7:0C:7C:82:55:0E:AE:79:42:E0:3C:F7:DD:20:23:A0:67:30","sha256":"57:17:E2:A4:BE:DB:DD:20:77:0E:85:3F:B3:D6:09:05:85:59:79:E2:6E:BE:8C:24:29:0A:05:98:7A:22:37:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab5cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:46:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Feb 2026 21:22:32 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1c1g7mtDKZE%2Bvq%2BcVvktxX%2FOvoALUtPMyHH9eOvTMZdQR%2FxH47FwoYSMzm75lnDTtTiDnWsPORT2B0uWiGih9SqzCJUv9Hy6%2Fw2Atv7\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cda438dfce8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3077,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a0f26889e6e84d54f9afc04a09159a21","sha1":"cf7f4d26fcab9ec4a0241bbc4e2c2d400c6dde4e","sha256":"f58d65434492eaaea85120c8d1a1f44e8e2a5af434bfa63388776af1fa5e5036","sha512":"3df3f1f0dbea93371d047c76eca0d9cd793e72fcfc59069b9ab12e8cb227e2b326ee0614bf1de4b0b7f61354ced469388999975b6b74f8f85a94da2fa3a04d51","ssdeep":"","tlshash":"7f5185d3e4f1259e10020172ee536e158cd1bd2f8bc2a785b3dd4eb78fd1ad9884762a","first_seen":"2026-02-13T17:32:15.246037Z","last_seen":"2026-02-22T18:56:49.598897Z","times_seen":8,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":48,"dns":27,"connect":1,"send":0,"wait":76,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab5cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}