{"report_id":"357e4af8-c016-4e76-8450-57e58d62a42c","version":6,"status":"done","tags":[],"date":"2025-12-20T07:11:57Z","url":{"schema":"http","addr":"kyraken.com","fqdn":"kyraken.com","domain":"kyraken.com","tld":"com"},"ip":{"addr":"31.97.103.72","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"kyraken.com/","fqdn":"kyraken.com","domain":"kyraken.com","tld":"com"},"title":"kyraken.com/","dom":{"size":75,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"013636b0506ac3869902f4b09697ee9e","sha1":"fb29f2011ae4a377f7c654c7c014bdc434a50431","sha256":"6ce054ffeb2cffb558bf9691b8b47ebd1de8738f6e9d2c55dcb4d1ccd8ebf28e","sha512":"e3b2526106dcfbb9133f0d783d5cd69106f97a62f985b9e3ad7cbcfe8b99e89113562c679285322546355a48cf8bfd2fadc11b4a30c53f0ef9273771dd29e3f6","ssdeep":"","tlshash":"05a022fbb0fb00308c203ac00cc22b030c2cc3c02020ab2023c0e82ca08c038cc8328c","dom_hash":"domhashf199f2cbf7136199021fb74ea4a8c22a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kyraken.com","fqdn":"kyraken.com","domain":"kyraken.com","tld":"com"},"ip":{"addr":"31.97.103.72","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T07:11:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"kyraken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"kyraken.com","ip":{"addr":"31.97.103.72","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2025-12-20T07:11:57.023958Z","last_seen":"2025-12-20T07:11:57.023958Z","alert_count":2,"request_count":2,"received_data":713,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"lighttpd:1.4.82","description":"Lighttpd is an open-source web server optimised for speed-critical environment.","website":"https://www.lighttpd.net","common_platform_enumeration":"","icon":"lighttpd.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kyraken.com/","fqdn":"kyraken.com","domain":"kyraken.com","tld":"com"},"ip":{"addr":"31.97.103.72","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T07:11:35.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyraken.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 04:17:54 GMT","end":"Thu, 19 Mar 2026 04:17:53 GMT"},"fingerprint":{"sha1":"6B:02:0A:7E:A6:51:D2:14:48:B0:37:93:92:EE:9D:F0:A5:72:C6:61","sha256":"0A:E3:AF:30:C8:1C:20:2D:1A:17:92:9D:03:B6:7D:4C:2C:51:E0:DB:D0:5A:D2:D1:8C:C8:68:89:EE:B5:40:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kyraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Sat, 20 Dec 2025 07:11:35 GMT\r\netag: \"3394810525\"\r\nlast-modified: Fri, 19 Dec 2025 04:36:32 GMT\r\nserver: lighttpd/1.4.82\r\nvia: 1.1 Caddy\r\ncontent-length: 75\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"lighttpd:1.4.82","description":"Lighttpd is an open-source web server optimised for speed-critical environment.","website":"https://www.lighttpd.net","common_platform_enumeration":"","icon":"lighttpd.svg","categories":["Web servers"]}],"data":{"size":75,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7004da01701ae12e2b3ef85437533d57","sha1":"82e9f37334cc05fe6a11f437f69554aaf663d51c","sha256":"34f172e80b9e44091c4016be521de489659e0ff99ca004997c8c68eafd0b39ae","sha512":"51eb9272a93c151c1a204ad4a9b0e96edd4cad96bf7e262fab93ab21a5b1dd8fb0b7e3c7bfe838176433c31c718a9b2b0b78ba52dec635f4c8db5cf31208b449","ssdeep":"","tlshash":"14a011b8b8ba0028ae203ac00882222a080c828080a0aa202288e828308a02acc8308c","first_seen":"2025-12-20T07:12:00.313218Z","last_seen":"2025-12-20T07:12:00.313218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":255,"dns":46,"connect":99,"send":0,"wait":101,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"kyraken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyraken.com/favicon.ico","fqdn":"kyraken.com","domain":"kyraken.com","tld":"com"},"ip":{"addr":"31.97.103.72","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyraken.com/","date":"2025-12-20T07:11:36.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyraken.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 04:17:54 GMT","end":"Thu, 19 Mar 2026 04:17:53 GMT"},"fingerprint":{"sha1":"6B:02:0A:7E:A6:51:D2:14:48:B0:37:93:92:EE:9D:F0:A5:72:C6:61","sha256":"0A:E3:AF:30:C8:1C:20:2D:1A:17:92:9D:03:B6:7D:4C:2C:51:E0:DB:D0:5A:D2:D1:8C:C8:68:89:EE:B5:40:B4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kyraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyraken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Sat, 20 Dec 2025 07:11:36 GMT\r\nserver: lighttpd/1.4.82\r\nvia: 1.1 Caddy\r\ncontent-length: 158\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"lighttpd:1.4.82","description":"Lighttpd is an open-source web server optimised for speed-critical environment.","website":"https://www.lighttpd.net","common_platform_enumeration":"","icon":"lighttpd.svg","categories":["Web servers"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e75bdf0f7b21df5a172bb762d96d42bb","sha1":"9b0e6476aac242317d97970291766b765ae67614","sha256":"92412a14d3fb620d6744ade0d6e9b531230844a5eee59a72194bcfcd4b1238c2","sha512":"bce829302d61824ee02eeb5ee85e449d96164e8e1db0af7dfab06f7e0903d5c01584e877d58439f9c7e64dc7ec0a8ab57966ac6d492173f7cb18a2865adcb551","ssdeep":"","tlshash":"17c08c4dc0024a6482a043606ac1f7826887c38bb4cbc9156d866001a88cea9c4cb3c9","first_seen":"2024-05-09T09:18:03Z","last_seen":"2026-07-08T19:48:06.563896Z","times_seen":96,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"kyraken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}