{"report_id":"3a484651-c089-4d4e-a58b-7665b295e248","version":6,"status":"done","tags":[],"date":"2025-02-26T16:20:01Z","url":{"schema":"http","addr":"kra02-store.top","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"104.21.35.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kra02-store.top/","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"title":"Kraken - Ваш безопасный вход в даркнет"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-05-07T16:20:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"kra02-store.top","ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-24","domain_rank":0,"first_seen":"2025-02-26T16:20:01.554758Z","last_seen":"2025-02-26T16:20:01.554759Z","alert_count":25,"request_count":23,"received_data":982258,"sent_data":10663,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-02-26","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kra02-store.top/fonts/Montserrat-Bold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-02-26","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kra02-store.top/fonts/Montserrat-Medium.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kra02-store.top/","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e032b680100c578b789afa49e8b9fcb2","sha1":"a700f87be21ed4fac256d523746583990ede9fb1","sha256":"1cd32fe744a6a25221244e09bd77cb2406ff6ca5766a7069bceb8d18c8657637","sha512":"03a7aad8fcbf7671cd8b330f6f7d53bcc46891fc4be343a11286cad93b4586092de2a6ab26b6bcaaf1623854d7be13fa3703f6666daca833f696aa9a15cba22c","ssdeep":"","tlshash":"15f005953cdd44248377106527fb9548743965292c0afd15f54cc4412f9deac18bb94c","size":537,"data":"","first_seen":"2025-02-26T16:20:03.490029Z","last_seen":"2025-02-26T16:20:03.490029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/js/main.min.js","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14920ac4edfa43fcfd781f7ef980c018","sha1":"027cdbc6162c643dff80059b524d9575303133cd","sha256":"eb97b08bc9cdbaf14d6239082c2388ca46b3b3eff9501c5f2a8f3ebb1608965a","sha512":"ac2b5e1dc70545713502d3c760d2d645b4016cd6208d86b9a1ebee88bb8fe3a2753d92e615bdb7875f8107086276a7659db0880931e3b43b4542aa45c2b3e23f","ssdeep":"1536:+arTGcGMId6xDvGYdhsEy8XDpB37DfE4SR/NDIzQWEm1/qlqWsC/7ruXxSE:Nrny8XD7IR/2sWLssC/74xSE","tlshash":"afd32ccdf285726286e720e5105f840ef3b7a9687809c050b194d6da7c7ca4e92e7fbd","size":130770,"data":"","first_seen":"2025-02-26T16:20:03.490965Z","last_seen":"2026-04-25T12:08:31.548903Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kra02-store.top/fonts/DrukTextWideMedium.woff2","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.980Z","timestamp":1740586771980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /fonts/DrukTextWideMedium.woff2 HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16468\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: \"6793178b-4054\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=D6VM4mKFYLAPqKd%2FrQr87CrGWE0S878Io21mRqROUk6%2BDtxlODK%2FqZoZqUfqp4%2FE%2BbnGc5qxrJ1M9zDbM1b66cbLkDpF4m0zePCg9uws618Usb8YhSFp9g8gqDoT4aekbM4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dcdc0356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2694\u0026min_rtt=1087\u0026rtt_var=1718\u0026sent=98\u0026recv=39\u0026lost=0\u0026retrans=0\u0026sent_bytes=77608\u0026recv_bytes=7082\u0026delivery_rate=1353370\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=681\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16468,"size_decoded":16468,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16468, version 1.0","md5":"07fe8a616b5f004a1740a389e376ed80","sha1":"03636e797c3ba2fb93638274467967bb9c00d7a3","sha256":"59dc16b8b7701cdba03c04a911b4ea3c930bcc821c0743d0e24d949c031542ff","sha512":"3b76cfedaf26965a4d6eeaeac0cd649a73622bc78a738d9268f614b8c127834aab04ced691b98ce4f39e06ab4eeea288c160e402af5192f637d0fe57fd85ef38","ssdeep":"384:oeo5vQfeL3uVN2u0LSxme1fDKFmogzFtePDKt1:oLNQfs827WxmeRimBr6G","tlshash":"4172d02cf807bae057354279ac90d319525f5be347b98dc399cd26b31c8a93e04931d6","first_seen":"2024-03-08T16:36:11Z","last_seen":"2026-04-30T14:57:30.037013Z","times_seen":19,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/fonts/Montserrat-Bold.woff2","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.982Z","timestamp":1740586771982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /fonts/Montserrat-Bold.woff2 HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 166380\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: \"6793178b-289ec\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=76WSyIHcYx6eSnTq%2B7VEC8bz5jYGF3OfQ1A6dzFXbRZH0V3q1%2Fzk2twVN9GcPRgdGgXmdke9bdD0l6xCX4nTmPb%2FEnqhtcnImW29L2zTWyk543tBB5H%2FCS3q5GlWTbOknXc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dcdc0a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2443\u0026min_rtt=1087\u0026rtt_var=1385\u0026sent=140\u0026recv=41\u0026lost=0\u0026retrans=0\u0026sent_bytes=127474\u0026recv_bytes=7174\u0026delivery_rate=11620410\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=711\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":166380,"size_decoded":166380,"mime_type":"application/octet-stream","magic":"PostScript Type 1 font program data (Montserrat-Bold 7.200)","md5":"57066d9cc9b73e333c0ef9b386853f5c","sha1":"32cba25fd28af850f3943afbcaa05569ef8fa1e2","sha256":"6a12f5caab662d642b94f0c77ac3a08f8e26aa74ca418abd9d934c8ba20744d4","sha512":"331b6210ea01f5f2813e7c008037b893195c100a459b8cbc037595279651e09ba5299659f214bef3569512bae1a48c7fa4b81caba13dd6db868b741c3581990c","ssdeep":"3072:fNyNSa7DCOU5We4zrAMBSUWWbWwR2lLXs4TiNS5:fgNBCOU5WtXa8bzEiNS5","tlshash":"6af31264edcfdf28c85734d31fc376396b42f0a386e97d951ae2aa8e504012612f5de8","first_seen":"2025-02-26T16:20:03.465669Z","last_seen":"2026-04-25T12:08:31.531703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-02-26","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kra02-store.top/fonts/Montserrat-Bold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/fonts/Montserrat-Medium.woff2","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.977Z","timestamp":1740586771977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /fonts/Montserrat-Medium.woff2 HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 164676\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: \"6793178b-28344\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DI6Un62pXsEJp8lC%2FsblEPm7NbVz5eW4EewfVBt6s6%2F%2Bg3CGw7nHy8F%2BYshOX9i%2Br%2BfMxnPGcDHJ%2BfM1ouHNIKHJzbuRnas0Tpfv3Je1do4iAadO7bpuPof8xiFm8qyBIkY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dcdbf856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2527\u0026min_rtt=1087\u0026rtt_var=1621\u0026sent=113\u0026recv=40\u0026lost=0\u0026retrans=0\u0026sent_bytes=95193\u0026recv_bytes=7128\u0026delivery_rate=7620814\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=707\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":164676,"size_decoded":164676,"mime_type":"application/octet-stream","magic":"PostScript Type 1 font program data (Montserrat-Medium 7.200)","md5":"60216bd9e225cc91488d3cb5d66273b4","sha1":"53c9aaec495027c399f594fae920dfadbf0b4d7c","sha256":"c931bec6411f69efc7918618db6fbda2141695c471603c9ba2d561299e4ca3c7","sha512":"9674c50f355d27c1c4c6aef0401517d5deb40555cdcb951cbdc9a2067fc740870290961fc80e12926e7e18826e8f78249c787a55413a8b882436d87a2dee98f5","ssdeep":"3072:Jqm4A8eu/N0SQtefvbQVf7n1Jv2FOyw0xf2AeX3EF9mYZg2fsXz:Jgr/N0Xyvuf7n1J2dw0xOvemYrO","tlshash":"c0f31238cadf9701c9137ee744c33575839af1968ad39e09c2198c5a261e3a471fd3da","first_seen":"2025-02-26T16:20:03.466752Z","last_seen":"2026-04-25T12:08:31.553668Z","times_seen":4,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-02-26","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kra02-store.top/fonts/Montserrat-Medium.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/logomini.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.940Z","timestamp":1740586771940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/logomini.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-4a1\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N2VxFmz8of9Qu85t0XnTcS1seARC1ZZLZMYRNHO3wizic6B5hwOeibyUgTq%2FSc%2BDkR1Onb40wqy6io3mknXhhiRFGeR5UYnEVeeoaaGTvdVywnUPnz5wsXRSnXMLS0x4%2Fqk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dc9b9656a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3367\u0026min_rtt=1087\u0026rtt_var=2800\u0026sent=87\u0026recv=35\u0026lost=0\u0026retrans=0\u0026sent_bytes=68459\u0026recv_bytes=6900\u0026delivery_rate=15478224\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=610\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140285,"size_decoded":1185,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e598ae5a67ca43f600b736377a762abf","sha1":"73aaeb668acc512c39cbcc11d5f93b25804decb5","sha256":"d91343a2ecec0d63451a53ef9d2edb529d71388353603dcece46980cfdb1b93c","sha512":"82c23b9494994f139749a9359d8e4baca0d421686f7873a1e4d60373b8c56ce73a245779495bcf344f18775d20ee7b9063280ffa65e22479a285785d72698271","ssdeep":"","tlshash":"a12121d14320d72ca5c8c4ceaf346951400b809e68fb95c8c9d72b24a44fdc6bf58964","first_seen":"2025-02-26T16:20:03.467727Z","last_seen":"2026-06-18T10:28:22.46743Z","times_seen":12,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/fonts/Montserrat-Medium.woff","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:32.244Z","timestamp":1740586772244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /fonts/Montserrat-Medium.woff HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 139304\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: \"6793178b-22028\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L7MXmT062C%2Bf9XmjPicMIfEwdYHfusIhYLq0R0NjFJveDwQAF4LJ59iA%2FouofZdbjRLbqKP3H9CF2m2Q%2ByKC9kDcYBmImD9QSKgcAGvPt5mljlI1zmB5Q3jOhG0VPyfI1cA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141de8f0f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3287\u0026min_rtt=1028\u0026rtt_var=2898\u0026sent=431\u0026recv=55\u0026lost=0\u0026retrans=1\u0026sent_bytes=469822\u0026recv_bytes=8395\u0026delivery_rate=175258\u0026cwnd=144000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=982\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139304,"size_decoded":139304,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 139304, version 7.200","md5":"229a05de5edb6e0da668f11634f03ee9","sha1":"fc1c761c785c0aa739f6ece90999641331941f68","sha256":"aabf1e7790c4a39f25912705a3559a3b95de23a6b0e213bfc8967aab9e6439f8","sha512":"b84071fc08cf307273671072b986874929c4ebd9aefea26f3158082eae5a21a5e351dc0290d43571414b6a191980f03afac65cb4663189cb795081f0128cc76f","ssdeep":"3072:XW/4j9N+W7soUT0+Kwhmq9qDvfsfnJe4k6Qw71Z9fo:dD7DUXK6vuvfsf84PQIw","tlshash":"03d312b193b1669eb1bc94701d3513fb82d1240337219e8255ecaaa4379fed36cf262d","first_seen":"2025-02-26T16:20:03.469949Z","last_seen":"2026-04-25T12:08:31.569428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/css/style.min.css","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.770Z","timestamp":1740586771770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-38f4\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CxaXsQ%2BaShhntT5nZiaFxChc7h6mm3CVWPS3VU47QguiD21Ug1e2NGcsToIcWmwFVHPMuvTVP%2BzX5enLCA8kWMfMrMcRvsMZAQC18t%2B%2FkxCWymskbZaaHS%2BR641J917YO9U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89a656a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5095\u0026min_rtt=1842\u0026rtt_var=3323\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=19496\u0026recv_bytes=3588\u0026delivery_rate=776700\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=467\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14580,"size_decoded":14580,"mime_type":"text/css","magic":"ASCII text, with very long lines (14580), with no line terminators","md5":"613a9af32361f73ff94b75978a4a0d8d","sha1":"54b867ab0506aba9ce26911e08097e476cf55f5d","sha256":"4d5ba7f652affc8b10d9db911d2b96515db092b8e49fd523a84e49c27841cbcd","sha512":"343ba44d3824370d24d97108ffd83ee49a4c868b0307ed13b681575b018130b2b3fd8506938ae2788f0f24cc91bddf78edcf5b345174fb1d0a235138981e249c","ssdeep":"192:FVCuJLJQgjFK6H72eqAn0fVf6/9cD9WJgp9i8osDa24ktkR4c/:FVCu3dDliaMicb4IkR4E","tlshash":"c962742362103609e007e622dbc19be23158a027d07717fbbe25572fcbdb69147b638e","first_seen":"2025-02-26T16:20:03.470998Z","last_seen":"2025-06-25T20:43:40.295122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/browser.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.774Z","timestamp":1740586771774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/browser.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-408\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Mhzy9V5tRC6623SvHUsrgljksD5neHeH2dmwWlJWQnoJIBZW5imizflo4Ms8yKrGyyHAi4aTC%2FZa%2BuEAHyC3SGulkaHum0RT4Q8z%2FZMYfFqLpQdK4bqtdfT%2BFsMsCC04w3c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89ab56a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6977\u0026min_rtt=1917\u0026rtt_var=5005\u0026sent=19\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=5689\u0026recv_bytes=3371\u0026delivery_rate=3670\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=434\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1032,"size_decoded":1032,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8979c18b4b26f74ffeb0c0dfdf7010c2","sha1":"25d18b53e5a80bda7c0d30205464b7814f3c5788","sha256":"77b90ba857371626ed82ed5425af07bc032ec35040efab9ac371c7b795b38057","sha512":"e915b3bc8dd608a031091e65a80b580d43c38154da38f5fae3bfb08412fbf01ad65646ae32909e8c2cc744017c77bf15b2562127c6b2264e3403c1a44919c50b","ssdeep":"","tlshash":"f4111261ca34d0e448d96636ef7a1f836d9bf8fe89a152d55cc7e70c3073c199a02d15","first_seen":"2025-02-26T16:20:03.471957Z","last_seen":"2025-02-26T16:20:03.471957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/zvezd.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.950Z","timestamp":1740586771950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/zvezd.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-1b6\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eNKefX871ONxEmE4hcMCd%2B4I%2FMSkV1KjRGsEMSwX7jYKxpVvkaq2QbczBU4QhHjRtIif802wxthxyZK4ZkJEP1SrepZ4yrQCII%2FppMKGZE7e1OwfkeWhydJNoqm0zWEG7dI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dcabaf56a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3089\u0026min_rtt=1087\u0026rtt_var=2657\u0026sent=89\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=69835\u0026recv_bytes=6945\u0026delivery_rate=166634\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=616\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":438,"size_decoded":438,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9edd82eed53fbc34bd7187c26f782dd8","sha1":"5c38c921ba3aa7ea892f94c4930ca33492d6787f","sha256":"bd851afde7d3c9d7c6904a229dfa2e57b4f0b9132d94123f80c6539b319b4878","sha512":"57dbe091d0f62744652b93613305673a984913c1c4ad85da7113a75bc20e944855d7ce46d546e43b4daf3672c9df2f8758d21e3e75a365de103795f55504f3e3","ssdeep":"","tlshash":"5df05cfb6760b1b852a94b9d9b3888b53a2370bd5996c085c4184b043006c9d2a678d8","first_seen":"2025-02-26T16:20:03.472915Z","last_seen":"2025-02-26T16:20:03.472915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/arrowdown.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.970Z","timestamp":1740586771970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/arrowdown.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-2c0\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0fJzblpJ9dqmU1aL%2FF9ZS6k672wPA0maLcVUjtLQIX4XccxNJKvZU9oXFseTxELh9VE4zkrdWaTRB%2BiBF44%2BqR51fjvu12EAxwQZh0kH%2B%2BtJ8si6VAxp2C7NSG3HM1bV8E4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dccbe556a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2943\u0026min_rtt=1087\u0026rtt_var=2284\u0026sent=91\u0026recv=37\u0026lost=0\u0026retrans=0\u0026sent_bytes=70856\u0026recv_bytes=6990\u0026delivery_rate=494014\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=635\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":704,"size_decoded":704,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c3e43fe229fcb65649e37122edc3ae4","sha1":"4c95ad252eb038f6d386aefac5aaf64575dc4c73","sha256":"4993cad984fb02137dea8c2e95a86ad56e955db3d24c0f05f8f060baae41ee7a","sha512":"875beea5006f72391b252e35a03be17f2722440d82642ce2f120ca5d31fafb64f635058ce9d7c373ad2787901faa64410425bdcc6ea4fea5dd86602a3c4ed1cb","ssdeep":"","tlshash":"4e019c699c34ab244cde6d42ef3758d6300ab1e907bf5b94045cbb1a31a7cdc7904844","first_seen":"2025-02-26T16:20:03.473824Z","last_seen":"2025-02-26T16:20:03.473824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/favicon.ico","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:32.444Z","timestamp":1740586772444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-47e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OKyDf0l5O89mKVB%2FEhTuwqd9IOAV%2F8JPXCwOwRZ5fmf5usqLzNaMaDqLLBOL4K66a5c%2F2c25ydpOU4w90gv8YOdd9bH7IzobkE3Jv4xkf19%2FrjLbjK2TyN851F%2BiGmmepLs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dfc92956a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4032\u0026min_rtt=1028\u0026rtt_var=3743\u0026sent=646\u0026recv=59\u0026lost=0\u0026retrans=1\u0026sent_bytes=725116\u0026recv_bytes=8812\u0026delivery_rate=3490322\u0026cwnd=144000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=1085\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":1150,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"3e0895adc4e70c1512435585ecdb1345","sha1":"e57dedbd19ae1380e6faa04ef1b72882a3f244ed","sha256":"9c162f15f4dee112234aca71ef7f557b85358ee20a5f40d08123048e7304e871","sha512":"81ae1c756e6780c0ce259037067ab0b888e37ec5c7685a5ad1e16df3f7504dd31cacdfcff4181b19f6149c0eba882089002bc9c1f0ea2a0d0fe73de93f082ecd","ssdeep":"","tlshash":"39217d8177420946c2d406f080c7d3f26e3a5c12d0f6010205d1be137e127442c1fda0","first_seen":"2024-03-08T16:36:11Z","last_seen":"2026-07-20T11:07:04.563578Z","times_seen":48,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/logo.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.772Z","timestamp":1740586771772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-51e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OTpnc%2BQj6PRJLglSSxKDK5ka%2FjYo7A7BRmm91gKnBd25MjGhPuq85LQybDAfC%2FlxawswGNH4K3ldIBz3GbihXquLElp9W4DH31rJPmloW2XYUkrS5%2BbAqgW%2FDCYBYa58oI4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89a856a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7669\u0026min_rtt=1917\u0026rtt_var=4827\u0026sent=17\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=4204\u0026recv_bytes=3327\u0026delivery_rate=307104\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=423\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":1310,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91c42eb99519f3dc372cd4559e0c173f","sha1":"58ef0a095112bbe88385b8695a20913bb02a149a","sha256":"22b311a3e3ab8437d11a41770e0a9ac140ab41329d3a20952a09985ba938e8b2","sha512":"667dcc02711e9ef6e47a29951873ca277a74c4a8cfc516388ccbb71e73cbdf9699f4501f734554dfa985e43025a59a9546d426704da0d1da1540b563f788e00f","ssdeep":"","tlshash":"3f2142ca4654a7c86acfc5aaff299c6d8849b8bc3eee59c580e5c9052068ccdf704c80","first_seen":"2025-02-26T16:20:03.476532Z","last_seen":"2025-02-26T16:20:03.476532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/change.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.783Z","timestamp":1740586771783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/change.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-ff2\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rnvtPqJsNPKnKem2VqDX61uHLmPKWcx7PTtISQ8FMm0ZAG8oZxPbImU%2FsnsimwyX%2BrXmSvSnpaMauc%2Be%2BKeBOkGViSyrDnqjbGWfGOa5a40kL%2FvLx48koYE2zEGY0TSQ%2BdU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89b456a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6977\u0026min_rtt=1917\u0026rtt_var=5005\u0026sent=26\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=10930\u0026recv_bytes=3371\u0026delivery_rate=3670\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=438\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4082,"size_decoded":4082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1487db05e48a87acd18a2e538a4d46ef","sha1":"c2c5d60fbbb61cc6f9b8060f197e6b97f0d1c991","sha256":"4b02871e7bb33772be272a936809cfe6fb1c70190d9705d4654c661162c9b7eb","sha512":"c61ffdee95dc6b8cbeb51ef3752860c5e0a5aeb88ae9fd141160ffdf02f0b99ee576538e39e9e3bbd24dcddf1930d285219ba5b36c0874aeccbcf3fa289ded8e","ssdeep":"96:YgM5Tfj01xNsy2reFMGBwSIy0I9HKTumzbVeNdW1w8FnwIvLJ7w8:t/6yjl9M/VQWfpvLF","tlshash":"3a81c7d60370f2c45bcbd80fef5058e9650bb0fe4a1621c451ae4756a8bfcadf506864","first_seen":"2025-02-26T16:20:03.478198Z","last_seen":"2025-03-10T19:18:59.661432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/shopcart.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.785Z","timestamp":1740586771785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/shopcart.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-10d8\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=znANoIjbv3c0YZGkSDpPkf1wHXhvl0BEE2%2FzU3e9nyHVO1kb9TJDnVVC4wwY7QLYXOUsfWlZ9iLcO0oVy1m1oQOl47n8ToN5Bo7sq5SPsV%2FZ4%2BE9KsGSBCRvk1pJ78mi7tQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89b756a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5816\u0026min_rtt=1917\u0026rtt_var=3787\u0026sent=29\u0026recv=18\u0026lost=0\u0026retrans=0\u0026sent_bytes=13546\u0026recv_bytes=3501\u0026delivery_rate=1700748\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=444\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4312,"size_decoded":4312,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba981cf79b432bf9a6767097409eeb14","sha1":"b150d38be1c159c66158f4c385e98e89f62ed8db","sha256":"0a49126c2aa701984438276dea0344d5406e022923a85dacaa584cb569fac15a","sha512":"033fdaf0738df40e6798b02f86fb250368a67dc05e410ef8e8842b42e51e1a12be56237e5d05ef7ef05cf98959e93f303808702dccad6b5ca14112082673978f","ssdeep":"96:X5zCHmynNgm5w0B5iiziJ3LEw+MwiFBSwzZGUOBjwFS97hq7IwP+M9uBqCKy1s9N:YH16m2SiMu74QBBUUOrlhq7GM9bCKy1O","tlshash":"0e9185c25730f394a9c6c46fff319de96106b0fd9e7aa4c4427f5612a5eb88af504c20","first_seen":"2025-02-26T16:20:03.479006Z","last_seen":"2025-03-10T19:18:59.663036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/support.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.787Z","timestamp":1740586771787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/support.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-178f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fr4ec%2BZPvWlOzysAElihs9C5%2FauCRa7NAeekzZEKbb7QCHF7zQFvLUI01YHJT7mDQCTuiEA9%2BCHVj%2BLCqLqXm7x1vDdVOXWWgWEE5zCVN8kNvz2TZykDxEixDLl4L0UZNhQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89bc56a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5319\u0026min_rtt=1842\u0026rtt_var=3834\u0026sent=32\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=16365\u0026recv_bytes=3545\u0026delivery_rate=1529609\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=446\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6031,"size_decoded":6031,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c1a76e7dfcf0ad7efad877f101bdf01","sha1":"13ecbef625fa266650bccd703abb9b4953fda310","sha256":"7e10a4ac75f88a2b5bd1c39dc29a5030adf32a68d007fe6eb934397dd14ebd1f","sha512":"a0f07a80703f62adba3d7728007929211e4c77550c30bfc2f6f25ebb556e6eb0863e5486519bb748291ed3d450c099e381e8e189abeb80e7e10a44f9e79f03c5","ssdeep":"96:BwMN/+Ly4mpIwIwcwr8xqctlxnxwDgcqtgv+PeUxPdnfwFvMYn2LhXQjDAUwQ1w8:dBd0NtnHX/e4dnfwqndCDNR","tlshash":"2cc1a7cb0b30a3f814c6cb7bdf2a52a4543ef4fda2a1618d46757e26d9d7c99f104920","first_seen":"2025-02-26T16:20:03.480053Z","last_seen":"2025-03-10T19:18:59.663943Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/js/main.min.js","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.788Z","timestamp":1740586771788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /js/main.min.js HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-1fed2\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AEYhlBa1v6FYtzLVzmvs0nr2c3S5GSR6k2aseWXsUIfPklI4bLcxVhJdokFupoEzqG5LIzoG8qfI1y%2BNlKgAxPiR0Zl8v8bCSMm2gK8gYQE3YPiMVvB4wTJGsCB7vAJzNMQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db99c156a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4671\u0026min_rtt=1703\u0026rtt_var=3340\u0026sent=49\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=23653\u0026recv_bytes=6723\u0026delivery_rate=2283000\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=562\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":130770,"size_decoded":130770,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T06:24:30.88226Z","times_seen":17442794,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/line.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.965Z","timestamp":1740586771965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/line.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-10d7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RGplUijQYyJKYjVtsv60gocmeh6fRK2%2FJqq8l8ij5zEmrVMOUT22bZVPNYJbQ8Zjnbqzu3aktfZq7GK9H48ufBaVeE99cF9lt6nxV8B8VtQCniIjbJ%2B3SlXNmCr0LRJrpHs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dccbd856a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2813\u0026min_rtt=1087\u0026rtt_var=1972\u0026sent=95\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=74868\u0026recv_bytes=7036\u0026delivery_rate=426401\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=646\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4311,"size_decoded":4311,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2aac9cf2deb804765a335d9cb318d3a","sha1":"7c41e7207bbe97724cb4c515cd921e430ba75efb","sha256":"f647ed931b9064f9f195e6455c5a1e5500b57169b4214c25c1392be8e15d1e8c","sha512":"cb240053d4c3191f89806616d1b862b819a5de847396f3815a2c80224141a4f3300dd6ed7f38b9d4f60945d975ba71a533efa369583c1859126c9498ba8c0fa9","ssdeep":"96:tK5FiTe6abpEzpTfdU/IMjXKbJpGSt1XxMPN+M5zfRJU4CAElLHLFwb:tsFiTe662zVqIMjXKbJpzZxMPr5z5TCi","tlshash":"0c91a4c85730e3b84fc586cfaf55adf8111770beae2f90c0919e8a18646bd2db9114a0","first_seen":"2025-02-26T16:20:03.482246Z","last_seen":"2025-02-26T16:20:03.482246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/arrowrigth.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.967Z","timestamp":1740586771967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/arrowrigth.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-a3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WyuP9WlzDqAdrH0MaHkX2IBElqWiFZEL%2F0pQxLc620szum9Jcw6hHEm3invB4KLfrBJcmjW560zT6nhOi73NZQfcbQWrrI6cGQwPOneu2BL%2F104al3bQ7hiOfmw5izVCjGM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dccbe056a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2813\u0026min_rtt=1087\u0026rtt_var=1972\u0026sent=94\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=74034\u0026recv_bytes=7036\u0026delivery_rate=426401\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=646\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163,"size_decoded":163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0dc359459c94a8921608b547dd784c80","sha1":"938838b1328c4010bf122caceaf2b7ae8e13a81b","sha256":"a89aaa184e192117dd5630fb9217375c4e2e903e6c415708500ee70d6021f4a3","sha512":"17c171fae8f9e7c496719425be7a115e9b82e8414796b4a13eb859798d6bafe7e9c06c39287685c10e740592b24143add94c58af11b3bd3bfaba8b41d8034fbd","ssdeep":"","tlshash":"d2c0809552547523e600d251bf39597555523084b5ae10c594585522321157f24775ec","first_seen":"2025-02-26T16:20:03.484462Z","last_seen":"2025-02-26T16:20:03.484462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/tor.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.779Z","timestamp":1740586771779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/tor.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-56d\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tMXIfBR5xE85%2FXGD9TIfseMoo0qx7kMpvfQT6LSXelsWJew6jCRjllxoHRB7pOsb4aB1xwQSVGg20OLPGpmp1JB5pNrEINN4YDfSwcI8PupdjhntfzrfLRcNOKsdTQg24l8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89af56a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6977\u0026min_rtt=1917\u0026rtt_var=5005\u0026sent=21\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=6943\u0026recv_bytes=3371\u0026delivery_rate=3670\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=435\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1389,"size_decoded":1389,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c4bc1e89ce2bbf15fe1b121be3584fb","sha1":"5c36fb41f687f1fc15ffcb7f83a9aa67d2eaf3c1","sha256":"41346e6cad9edf772d4990ee1dfa67652a868a6a94c1fa5954468ce53950d14f","sha512":"1b34486618601fee819301ea6dfc558defc57f4948e6a7a162242a3091dc5569904c72973cc80f58707135bf8b7db430a194f9e9f05ad6ec228eaa214dda4e81","ssdeep":"","tlshash":"ed2124fb1660e358559a6a2faf76ad04f00bf16e386741c4976a97089043c9eff08c20","first_seen":"2025-02-26T16:20:03.485352Z","last_seen":"2025-02-26T16:20:03.485352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/firstchange.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.781Z","timestamp":1740586771781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/firstchange.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-13c3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h343j2eL2F3DQ7ifFp8S3Kg4t8PGYqgVyOxvSsuxWuV6O70BdNKA9Mi%2FsHlrJvI79uFbp%2FHekZiWQFQjJkBo4thcwEZQ4AUDsJqu%2Bx8helrtydZevkWPzG7MS64zcKLX2YU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141db89b256a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6977\u0026min_rtt=1917\u0026rtt_var=5005\u0026sent=23\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=8408\u0026recv_bytes=3371\u0026delivery_rate=3670\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=436\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5059,"size_decoded":5059,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13366cb900e138c782d9bd724b1c6050","sha1":"8fab76d004c4d0755cf68becd0aa8b26205238d4","sha256":"372bf8974369cae58abefcb570be923f04ba7a29618fb82109598fbf495666fd","sha512":"9d76b72cdb06ec15694ac2b52b60b17d759f47d0c3697826cc9599ef8484723d389531f14bc0d59bfc20b9051d46ba8a9c46f80182c46d1e8b7289b9111d27f1","ssdeep":"96:XQhR4w/R9P4++dYHlDA4qwF7dMndM7Wepeac/AeNOwvJA3wC/5djSql+JAiwoJsY:XQrP2Hfq7pBc/AeMKA3rRd+dAi5s/AW8","tlshash":"f1b12ec0323091ecf9489be96f68987868b931f930f5dc879d1f8b0ce95698be145e18","first_seen":"2025-02-26T16:20:03.486264Z","last_seen":"2025-02-26T16:20:03.486264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/fonts/Montserrat-Bold.woff","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:32.210Z","timestamp":1740586772210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /fonts/Montserrat-Bold.woff HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 139644\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: \"6793178b-2217c\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CLAB42Y3lDygCpeH%2Bgf0vsMXQclKq0XazgN%2Fama1h5oQKDxcXcujck8uXy97wrxTCs%2FnWBbJDtSUEvGvaEhsLGhlHU5lij%2B0fmzpLA2vCe7U8KsonxAG4ETrOHv0j3y1%2FHs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141de8f0456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3518\u0026min_rtt=1028\u0026rtt_var=3251\u0026sent=404\u0026recv=54\u0026lost=0\u0026retrans=1\u0026sent_bytes=437540\u0026recv_bytes=8349\u0026delivery_rate=2040118\u0026cwnd=144000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=973\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139644,"size_decoded":139644,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 139644, version 7.200","md5":"e7b439f50720ae72a0631c24b4032ce8","sha1":"26fb2bcc1d8dda5c9a83a5fe9ba365a8cded17d6","sha256":"b5c534fd58d5d5f6ec6ea87c2fc899c7d4fc52813af00a970b1a3b1bb811fb87","sha512":"99eea6197ed3afca26ca6ffa974abb9ebd8ad95da7cdb79dd636a39809c86d1cec4cc76c874bc1f58ec91924cb4f851b03f5f4ef24d7d97f9cba7f50aac6ebca","ssdeep":"3072:AxDtVNh+Kd5eOqa+LJRTq9qD7x5LE4y2uY6sUlX:uhLd4BXsu7n5PT6HR","tlshash":"16d3126acab8de8b30c5f434193c1a940d8b7d256ba9515c40ee33d9eb065e6fdcc239","first_seen":"2025-02-26T16:20:03.487193Z","last_seen":"2026-04-25T12:08:31.572959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":183,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/lineaba.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.963Z","timestamp":1740586771963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/lineaba.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-10f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=D9m7vJ3tWikPJDl6cdJg88kt%2BaCRy6mydMEn7TcWIcfCOLKvDYj3Ve5nNO3UFlHRSq8wP7TSLRnh%2FjXZc%2FSt45z9jtLEyxrrGSGB2Kzf6H5lxLrOtl1xzpGi0Hf0GgY6eQQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dcbbc756a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3367\u0026min_rtt=1087\u0026rtt_var=2800\u0026sent=86\u0026recv=35\u0026lost=0\u0026retrans=0\u0026sent_bytes=67556\u0026recv_bytes=6900\u0026delivery_rate=15478224\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=598\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271,"size_decoded":271,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3e56fa91ed6d6d207a57fc2b6f6593c","sha1":"26c26a2279979a95adfeba108ddf50bb4e548107","sha256":"052049f4575aa05cc374924a0a2f1f817dc2f4f3b8b53944fa98c5b32c68cfb3","sha512":"42bf4aa6737c2dc7e778d6ef87ea35deb4b4cdb893c70b1f0d64da03cc99db4dd3aa635297c8d3e9e6dd0a3bc918da940799fd954a82de8bba9a67c331a006e1","ssdeep":"","tlshash":"11d02bf59bdc6034da08a4e77a244eaa4262b1c906dd2248da908b252210ebe255309c","first_seen":"2025-02-26T16:20:03.488217Z","last_seen":"2025-02-26T16:20:03.488217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-26T16:19:31.235Z","timestamp":1740586771235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 15 Feb 2025 22:43:21 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xF4a9Cw%2BDtetvKQBW8JcmkHABGZBuFPTz20NkiytsRYBxRpsiiHzhpXUx7T%2FUv3p9WDZWr7Crvi0UN1UgIjazhCGd6O6XXA64hskhTqeHC%2B1pqmMZtfJokZ25TRqAyxGZP8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 918141d86a8c1c06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5731\u0026min_rtt=419\u0026rtt_var=10624\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3288\u0026recv_bytes=1253\u0026delivery_rate=7869565\u0026cwnd=248\u0026unsent_bytes=0\u0026cid=8ec7f45c6c16d4a1\u0026ts=156\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15622,"size_decoded":15622,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T06:24:30.88226Z","times_seen":17442794,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":29,"dns":12,"connect":1,"send":0,"wait":142,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra02-store.top/images/webweb.svg","fqdn":"kra02-store.top","domain":"kra02-store.top","tld":"top"},"ip":{"addr":"172.67.212.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra02-store.top/","date":"2025-02-26T16:19:31.955Z","timestamp":1740586771955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra02-store.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 03:44:35 GMT","end":"Thu, 24 Apr 2025 04:33:45 GMT"},"fingerprint":{"sha1":"16:C8:C1:45:33:50:04:E2:BF:94:A6:32:C9:BA:1B:BB:2C:6B:C6:13","sha256":"16:49:21:F8:DB:2D:E3:42:66:2B:32:52:8E:4F:C4:5D:AF:F8:D0:04:1F:D2:DE:9B:37:AB:54:6C:12:26:EB:FE"}}},"request":{"raw":"GET /images/webweb.svg HTTP/1.1\r\nHost: kra02-store.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra02-store.top/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 26 Feb 2025 16:19:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jan 2025 04:31:07 GMT\r\netag: W/\"6793178b-b28\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QB6%2FFngg4ll2VrR7s5422tynfGnsu%2F88T0RGsUfCbRV326LUNK1X9Tiro4viIACWvhke%2BX8a%2BRwTNhDfNiqw5xL%2BSJmfSCx4pihWKsi%2Bnhuh2W%2BWZ2E6rBYY85vu%2FWlL%2BwQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918141dcbbb956a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2943\u0026min_rtt=1087\u0026rtt_var=2284\u0026sent=92\u0026recv=37\u0026lost=0\u0026retrans=0\u0026sent_bytes=71971\u0026recv_bytes=6990\u0026delivery_rate=494014\u0026cwnd=36000\u0026unsent_bytes=0\u0026cid=2d434c338fc00d96\u0026ts=640\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2856,"size_decoded":2856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ba6fcc0a1bb20faa52f779482a0d7a6","sha1":"06b6f09d110179cf19dd9b9b421344cf6a54d13f","sha256":"e8bba0017ef206c458c2be80f5d350387ad730749211a818adbe1f83229800e0","sha512":"814f47576fa6ee110cad556166a89db012ad4f74f70dae7ddf866ed012ce9198d178322e8f821913b097a3562cc959b65d8b6d077a5cf5c88c924c1dcdfb73ad","ssdeep":"","tlshash":"8a51a4d96b20f2b462c6c2dcef21ade9355570bd0e771284809f862a34729bf6512ce4","first_seen":"2025-02-26T16:20:03.489056Z","last_seen":"2025-02-26T16:20:03.489056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-26","alert":"Sinkholed","trigger":"kra02-store.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}