Report - www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC

Report Overview

Submitted URL
www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
IP
104.21.48.77
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 17:19:26
Access
public
Website Title
Sign in to Kraken - Kraken | Buy, Sell and Margin Trade Bitcoin (BTC) and Ethereum (ETH)
Final URL
www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
60

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
node-ya-1.jivosite.com	unknown	2011-05-06	2023-01-17	2024-04-11	486 B	727 B	51.250.22.213
telemetry.jivosite.com	44693	2011-05-06	2015-07-15	2024-04-05	457 B	93 B	94.139.253.159
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	866 B	39 kB	104.17.24.14
code.jivosite.com	30079	2011-05-06	2012-07-22	2024-04-15	4.2 kB	322 kB	193.17.93.93
www-kraken-app.com	unknown	unknown	No data	No data	18 kB	459 kB	172.67.181.187

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet
2024-04-18	medium	www-kraken-app.com/	Crypto/Wallet

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	code.jivosite.com/widget/tIWAThkoVp	18 kB	2024-04-18	2024-05-02
Pretty URL code.jivosite.com/widget/tIWAThkoVp IP 193.17.93.93 ASN #210756 EdgeCenter LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:12:43 Last Seen2024-05-02 12:16:38 Times Seen72 Hash c187ea619c2028554c6e93bc3a8c99fd 9047b2351bc2389dd84edf455151800f9db31cba d2daa1ce8a682d60052f125ad10fddc233bbf081e9c0d9bc5580e71e697cb624 Loading...

	unknown	51 B	2023-11-18	2024-04-19
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-11-18 02:50:11 Last Seen2024-04-19 19:19:33 Times Seen7 Hash 33e29a11d5bb1ceeba5301a7c4345d93 d7c3b89c56ec52114140032581c4def40f57c25b dd7ff6b1b7dd5bbab07107aa999ae9388dc445a9e1972592e339f279172aea02 Loading...

	unknown	325 B	2023-12-12	2024-04-19
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-12-12 03:26:06 Last Seen2024-04-19 19:19:33 Times Seen5 Hash d160934b9ba969b794e9870aa9a790c3 ba4996455cd028d02b62e23a01c4f055da10ad37 113d93d28fa77d63cabd6b615ae2b6e21739301defc043247949b0232082c3e8 Loading...

	unknown	1.1 MB	2024-04-19	2024-04-25
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 17:50:58 Last Seen2024-04-25 17:14:07 Times Seen5 Hash 911a050537d3c997e9238649da0633f4 700e8d472da319ba1b9a0f9d7ae2889523acdee5 4c742e52cf29414aa1d304280b6d94382f92cf69eb9e7ce3ea448a10184c03fc Loading...

	www-kraken-app.com/wallet/app/js/jquery-3.6.0.min.js	90 kB	2023-03-07	2024-05-02
Pretty URL www-kraken-app.com/wallet/app/js/jquery-3.6.0.min.js IP 172.67.181.187 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-02 16:01:37 Times Seen264942 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC	315 B	2023-11-06	2024-05-02
Pretty URL www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC IP 172.67.181.187 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-06 00:47:14 Last Seen2024-05-02 10:09:25 Times Seen16 Hash 004ff1f6d50bf7d7579bdbfee7c60a2a 4e7d01c28bedee670a0a2a543c28834a0a434500 e9ac0e59bfcec3fc2929f53a31c37c1319209135bd97179fb9c6c2c99162cbf4 Loading...

	www-kraken-app.com/wallet/dados_comando.js	9.1 kB	2023-12-12	2024-04-19
Pretty URL www-kraken-app.com/wallet/dados_comando.js IP 172.67.181.187 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-12 03:26:06 Last Seen2024-04-19 19:19:34 Times Seen5 Hash 32a92cac50f12cfe9f5f4d78e23cdd7a cabafec8672bd00d2c5824f654878c7c205829c3 6a1cb65e26e31feb74dc81fbe400059d7c196a7c3851ec8b6634333f6d11ddbd Loading...

	www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC	3.2 kB	2023-11-18	2024-04-19
Pretty URL www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC IP 172.67.181.187 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-18 02:50:11 Last Seen2024-04-19 19:19:34 Times Seen6 Hash e4813c0ed07db26865a0bb2f23afa48d 1fc887560f81d6588a2896094e0a8f3b7b5b5bcf ff885a2ad2a89b8aaaa440b5aef31638ee8a483538cb9068a79f0469a72914ed Loading...

	www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC	6.3 kB	2023-12-12	2024-04-19
Pretty URL www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC IP 172.67.181.187 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-12 03:26:06 Last Seen2024-04-19 19:19:34 Times Seen5 Hash 175bcfd3ea3b161e97f121b9cfb3b6d2 6f4117c9a41c2ab15080ba9cda101ecf87e97fdd b0f976b058c6bcbbeba9903422ffdf2c34eef6473360b2e88eef717ca3450e69 Loading...

	code.jivosite.com/js/bundle_en_US.js?rand=1713439185	1.1 MB	2024-04-19	2024-04-25
Pretty URL code.jivosite.com/js/bundle_en_US.js?rand=1713439185 IP 193.17.93.93 ASN #210756 EdgeCenter LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 17:50:57 Last Seen2024-04-25 17:14:07 Times Seen5 Hash 22d5bc979e400458c3472e8b8b024d58 3655d188f923e195c1c2ad5bc731859a628e3560 e695f7d71b6b9b80121411011d60872adc4aaaba68be34b80b04bd443393c46c Loading...

	cdnjs.cloudflare.com/ajax/libs/axios/1.1.2/axios.min.js	27 kB	2023-03-08	2024-05-02
Pretty URL cdnjs.cloudflare.com/ajax/libs/axios/1.1.2/axios.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 08:20:01 Last Seen2024-05-02 10:09:25 Times Seen503 Hash 68b395fd3cd02432ec6ce3a4a34332c0 69edb681673e5ad794d33f9f05b8b08ea940c13b ffb6e270a7bbb1ea1b797965ae85e35760b38b98744478a4151ddee79a31d215 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js	90 kB	2023-03-07	2024-05-02
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:28:27 Last Seen2024-05-02 15:48:46 Times Seen23314 Hash 00727d1d5d9c90f7de826f1a4a9cc632 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74 Loading...

	code.jivosite.com/js/f9fd344/omnichannelMenu.js	35 kB	2024-04-18	2024-05-02
Pretty URL code.jivosite.com/js/f9fd344/omnichannelMenu.js IP 193.17.93.93 ASN #210756 EdgeCenter LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:12:44 Last Seen2024-05-02 12:16:38 Times Seen64 Hash 4d986d0350ce9d996011f5aec2b9b4ec 936378171d1a53c5e31cf2d615b1b229327285a5 a1f4bce3610e3273ceb27a97110c52462ded09a14004abdd123bf3035f4c0c09 Loading...

		Size	First Seen	Last Seen
	#1 Write - d41d8cd98f00b204e9800998ecf8427e	0 B	2023-03-07	2024-05-02
Pretty Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-02 16:07:31 Times Seen37275218 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (44)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/axios/1.1.2/axios.min.js

104.17.24.14

200 OK

8.9 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/axios/1.1.2/axios.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (26541)
Size
8.9 kB (8912 bytes)
Hash
68b395fd3cd02432ec6ce3a4a34332c0
69edb681673e5ad794d33f9f05b8b08ea940c13b
ffb6e270a7bbb1ea1b797965ae85e35760b38b98744478a4151ddee79a31d215

HTTP Headers

GET /ajax/libs/axios/1.1.2/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:18:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 8912
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "63400f9e-22d0"
last-modified: Fri, 07 Oct 2022 11:38:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2957477
expires: Wed, 09 Apr 2025 17:18:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCXczh8Iw5QPFQjUmXY0s3%2BPpHw6Yge837IFhgckcmRmRn6iwf7f8pVyHKSD8LDvD6QYXwXNp3fmOu0vKksmabbRzY0N5DCGEoTJpafvC7EgCz0%2F3dFx04jSFNXd1mlPYbv%2Bn2pJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876e8e98dcc156b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
28 kB (27990 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

HTTP Headers

GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:18:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 27990
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "63091225-6d56"
last-modified: Fri, 26 Aug 2022 18:34:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 257419
expires: Wed, 09 Apr 2025 17:18:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HwVIpQ7hZAtj2e7xqMfvKRcXItsUqdiqWfMNgZoJ65Q5MYOUKjWLLArGL3SYQ9Rf0ZuvSb2wnK97Ll7zi3Vb0nTcINMTH8GkT8yw7W0u6dsfaW1hvoHZHGs4dy2KcAjtjUZvVgaN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876e8e98dcbd56b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jivosite.com/widget/tIWAThkoVp

193.17.93.93

200 OK

6.1 kB

URL GET HTTP/2
code.jivosite.com/widget/tIWAThkoVp
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
JavaScript source, ASCII text, with very long lines (17637), with no line terminators
Size
6.1 kB (6056 bytes)
Hash
c187ea619c2028554c6e93bc3a8c99fd
9047b2351bc2389dd84edf455151800f9db31cba
d2daa1ce8a682d60052f125ad10fddc233bbf081e9c0d9bc5580e71e697cb624

HTTP Headers

GET /widget/tIWAThkoVp HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: application/javascript
content-length: 6056
access-control-allow-origin: *
cache-control: max-age=7200
content-encoding: br
etag: "661fba80-17a8"
expires: Fri, 19 Apr 2024 19:19:00 GMT
last-modified: Wed, 17 Apr 2024 12:03:12 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: MISS
x-node: m9-up-gc82
accept-ranges: bytes
X-Firefox-Spdy: h2

www-kraken-app.com/assets-kraken/fonts/CeliasW05-Thin.8a81ff31.woff2

172.67.181.187

200 OK

30 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/fonts/CeliasW05-Thin.8a81ff31.woff2
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30152, version 0.0
Size
30 kB (30152 bytes)
Hash
e9b40e63caf3cbff754a570e614d7572
bffeaf0b8ed31b399aa834c106a0f54d18a598e6
0aa91303eaecad1e845d4a9ca346ef1c009440893738c540048c4f05bc1f92b2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/fonts/CeliasW05-Thin.8a81ff31.woff2 HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/763261567d26ffd6.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: font/woff2
content-length: 30152
last-modified: Wed, 08 Nov 2023 15:19:34 GMT
etag: "75c8-609a59d5cea18"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=950PThb7qFDMmFl895n3NF3XQx2Nq0vUMsQwB5DR%2FTItDwunZGr3fztHL%2BZHtIZB5dfjK7AfB9U9bKFDRFCrr003uzrxl%2FEhkTLewOgVbSU4%2BVZcbqchGX9VHFEGbvGRA9h3QhA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d8a9756cb-OSL
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC

172.67.181.187

200 OK

6.3 kB

URL User Request GET HTTP/2
www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
JavaScript source, ASCII text, with very long lines (1489), with CRLF line terminators
Size
6.3 kB (6259 bytes)
Hash
58a382c906a7255430cd1e9337fb76f3
37a0eccaaf29d94b89130e466327306b2fa0155a
0c5b76c5635afe4f6551dc802eeca3877ec45e2b3907ba1c056f055caa765c10

HTTP Headers

GET /wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:18:59 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
set-cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9sRhAS3FfSV%2F6oYeU59%2BZeth43p84Ipm9A%2BmL1xzD%2FaglfFyfp9Lx63t7cThZ0dTb9AM8XypetYLFqdxn4qousIRv2VigrvLokSPQZBly9IQ0d2HGqX9soBOqqQ%2FBNiW8pwjJU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8e964d670b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www-kraken-app.com/assets-kraken/fonts/IBMPlexSans-Medium.65f4b020.woff2

172.67.181.187

200 OK

60 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/fonts/IBMPlexSans-Medium.65f4b020.woff2
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 59736, version 3.65
Size
60 kB (59736 bytes)
Hash
d6f5f2a2a3555fa332adee834987b164
cb0eb434ca296153c1bcaa5bb0894fd91b83efa2
a61c089861e3cd5bb3a48cf80da84cbe10bd65b5ef6a9276fa43f4e8599876cf

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/fonts/IBMPlexSans-Medium.65f4b020.woff2 HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/763261567d26ffd6.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: font/woff2
content-length: 59736
last-modified: Wed, 08 Nov 2023 15:19:46 GMT
etag: "e958-609a59e0cfed9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1uDUEIdVDlL2UoMpn%2FK%2FecL4Vj02eDZGLRaFsvZ%2FXtkxvLgTZypZZ5X8gHvkOWjDGBAdyW2VZ%2BUVlFNanEbvpxn5haMm7UzWt8UQkz%2F%2Fi2rWZbwZ99I5Ric%2BeyvEMJwwUxqGC6U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d7a8f56cb-OSL
alt-svc: h3=":443"; ma=86400

code.jivosite.com/script/widget/config/tIWAThkoVp

193.17.93.93

200 OK

688 B

URL GET HTTP/2
code.jivosite.com/script/widget/config/tIWAThkoVp
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
JSON text data
Size
688 B (688 bytes)
Hash
b01fe6b074dbc2bdf556c84dcd0af7dd
d7626893edd312245bc9ff5dc9801d804c86d606
d3c2c682b120e246b8c9e73ba774b650efebcc9db0972551118f267ba24ba237

HTTP Headers

GET /script/widget/config/tIWAThkoVp HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www-kraken-app.com
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: application/x-javascript
content-length: 688
access-control-allow-origin: *
cache-control: max-age=7200
content-encoding: gzip
expires: Fri, 19 Apr 2024 19:19:00 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: MISS
x-node: m9-up-gc228
accept-ranges: bytes
X-Firefox-Spdy: h2

node-ya-1.jivosite.com/widget/status/2389195/tIWAThkoVp?rnd=0.298127564735149

51.250.22.213

200 OK

187 B

URL GET HTTP/2
node-ya-1.jivosite.com/widget/status/2389195/tIWAThkoVp?rnd=0.298127564735149
IP
51.250.22.213:443
ASN
#200350 Yandex.Cloud LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
JSON text data
Size
187 B (187 bytes)
Hash
768801eb2dc163525a9c0378af9167f6
20b17bd93c429bf7617389079e9df63524d25870
639fb912acc8ff4a6f15a3a18e68575e90266f3ca9f7089a53eea8a770c57ee6

HTTP Headers

GET /widget/status/2389195/tIWAThkoVp?rnd=0.298127564735149 HTTP/1.1
Host: node-ya-1.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www-kraken-app.com
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-max-age: 1728000
access-control-allow-origin: https://www-kraken-app.com
access-control-expose-headers: X-Geoip, X-Botmode
cache-control: no-cache, no-store, must-revalidate
content-security-policy: frame-ancestors 'none';
content-type: application/json; charset=utf-8
pragma: no-cache
server: foxy/3.2
x-botmode: no
x-frame-options: DENY
x-geoip: NO;03;Oslo (Alna District)
content-length: 187
date: Fri, 19 Apr 2024 17:19:01 GMT
X-Firefox-Spdy: h2

www-kraken-app.com/assets-kraken/fonts/IBMPlexSans-Regular.85dafea3.woff2

172.67.181.187

200 OK

56 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/fonts/IBMPlexSans-Regular.85dafea3.woff2
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 56184, version 3.65
Size
56 kB (56184 bytes)
Hash
bb07700dc58a6d40a80c0632e0e09c38
1588c41e9e71a29264e9a841b5cd0d74a37b337e
dd6cd52bf15d2f5bf7519cd3d876ae2d37306e77d1a95a63e867e6c95ab9c49e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/fonts/IBMPlexSans-Regular.85dafea3.woff2 HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/763261567d26ffd6.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: font/woff2
content-length: 56184
last-modified: Wed, 08 Nov 2023 15:19:40 GMT
etag: "db78-609a59dbcce8b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vtbMV8tpnr1yPlVKZwzGtG7xUmeJWFl2mMn%2F8mvoJLbVs%2B8rgDBpGM3qO1v0ufpDWEKe9eL2rGR%2B5M4U3w8XqGt8kHC45HQgrzp9qHYNs5%2BReMxqdiyiO8LjpIIU38sH8PaT4cQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d8a9856cb-OSL
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/fonts/IBMPlexSans-Bold.7f197331.woff2

172.67.181.187

200 OK

56 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/fonts/IBMPlexSans-Bold.7f197331.woff2
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 56112, version 3.65
Size
56 kB (56112 bytes)
Hash
88468edcbb512ffa28964dacf404bd0f
02b035c1280e92f474f1b46606ee5b03b733bf87
8899b62d74d06f482f132b600d49c9a51cf13a3d830ac35d158f8cce65079c20

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/fonts/IBMPlexSans-Bold.7f197331.woff2 HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/763261567d26ffd6.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: font/woff2
content-length: 56112
last-modified: Wed, 08 Nov 2023 15:19:53 GMT
etag: "db30-609a59e76a50a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1PWXU1hhqgulwqCJTetql0PB2g%2Fh66dYERnEl%2BS8f4X1tqugR5CLNEXdAuzl%2B7AGx8hLr7M195ZTama3DRv%2BFwbNaQJ8XV5U16Dcqsj5aBSB1FQcQ39MUvIcS6VqFRHB%2BrSPQQY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d8a9556cb-OSL
alt-svc: h3=":443"; ma=86400

code.jivosite.com/js/bundle_en_US.js?rand=1713439185

193.17.93.93

200 OK

244 kB

URL GET HTTP/2
code.jivosite.com/js/bundle_en_US.js?rand=1713439185
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Size
244 kB (243966 bytes)
Hash
de7762fd593d7481c6dbb6bd82386136
070c74c31051722c9972be0050e6bad610d4324c
8191146c37a68d55af38fb87339995acf7239313be9d97f0c19a40dc7a7c3a5a

HTTP Headers

GET /js/bundle_en_US.js?rand=1713439185 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: application/javascript
content-length: 243966
access-control-allow-origin: *
cache-control: max-age=86400
content-encoding: br
etag: "661fba7f-3b8fe"
last-modified: Wed, 17 Apr 2024 12:03:11 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T17:18:25+00:00
x-node: m9-up-gc233
accept-ranges: bytes
X-Firefox-Spdy: h2

www-kraken-app.com/wallet/app/js/jquery-3.6.0.min.js

172.67.181.187

200 OK

32 kB

URL GET HTTP/3
www-kraken-app.com/wallet/app/js/jquery-3.6.0.min.js
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
32 kB (32256 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/app/js/jquery-3.6.0.min.js HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 18:28:16 GMT
etag: W/"15d9d-5ec951ee29000"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPO%2FBdBMyYvvtqGsB8QmlUpAe4w8xzE%2BaIPTd8SJbeFWFMkGz%2FdWDsA4FKdRW3%2FI8XRIGXbRUBAdLSf93TQfsP3cr%2BrpUCxTvtRdSrwgqfQu3sMTn%2FTk83PwXJkoFAJOCgxWH3Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98cdde56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

code.jivosite.com/css/f9fd344/widget.css

193.17.93.93

200 OK

42 kB

URL GET HTTP/2
code.jivosite.com/css/f9fd344/widget.css
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
42 kB (41689 bytes)
Hash
0bc0635afa9f471f3d66563fdde90bf3
864b6b6ed939dc8291e94e071455e523d998a878
3516b9da57a710eb243eb43e601a16a1a68e1355f976b13ac3e141cd3d32205a

HTTP Headers

GET /css/f9fd344/widget.css HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: text/css
content-length: 41689
cache-control: max-age=864000
content-encoding: br
etag: "661fba7f-a2d9"
expires: Mon, 29 Apr 2024 17:02:53 GMT
last-modified: Wed, 17 Apr 2024 12:03:11 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T17:02:53+00:00
x-node: m9-up-gc89
accept-ranges: bytes
X-Firefox-Spdy: h2

code.jivosite.com/css/f9fd344/omnichannelMenu.widget.css

193.17.93.93

200 OK

1.3 kB

URL GET HTTP/2
code.jivosite.com/css/f9fd344/omnichannelMenu.widget.css
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
ASCII text, with very long lines (4471), with no line terminators
Size
1.3 kB (1337 bytes)
Hash
1e7cde329a3a155b22639ff8cffd1269
1b5e8d1b6f8d6f1f7503b6c452fec7c179adb558
0f3286aab073e23963c5c2665600d09cfa74f4e2c36289ef19e59ab739c84f6f

HTTP Headers

GET /css/f9fd344/omnichannelMenu.widget.css HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:19:02 GMT
content-type: text/css
content-length: 1337
cache-control: max-age=864000
content-encoding: gzip
etag: "661fba7f-539"
expires: Mon, 29 Apr 2024 16:59:33 GMT
last-modified: Wed, 17 Apr 2024 12:03:11 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T16:59:33+00:00
x-node: m9-up-gc80
accept-ranges: bytes
X-Firefox-Spdy: h2

code.jivosite.com/js/f9fd344/omnichannelMenu.js

193.17.93.93

200 OK

9.6 kB

URL GET HTTP/2
code.jivosite.com/js/f9fd344/omnichannelMenu.js
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
JavaScript source, ASCII text, with very long lines (34799), with no line terminators
Size
9.6 kB (9607 bytes)
Hash
4d986d0350ce9d996011f5aec2b9b4ec
936378171d1a53c5e31cf2d615b1b229327285a5
a1f4bce3610e3273ceb27a97110c52462ded09a14004abdd123bf3035f4c0c09

HTTP Headers

GET /js/f9fd344/omnichannelMenu.js HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:19:02 GMT
content-type: application/javascript
content-length: 9607
access-control-allow-origin: *
cache-control: max-age=86400
content-encoding: br
etag: "661fba80-2587"
last-modified: Wed, 17 Apr 2024 12:03:12 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T17:04:14+00:00
x-node: m9-up-gc98
accept-ranges: bytes
X-Firefox-Spdy: h2

code.jivosite.com/sounds/agent_message.mp3

193.17.93.93

206 Partial Content

3.8 kB

URL GET HTTP/2
code.jivosite.com/sounds/agent_message.mp3
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Size
3.8 kB (3760 bytes)
Hash
8e9a165c4cb185ffd0b2658fa088e43b
195873e5e8bbb2f5ecc32d95f90d6fb75817a649
ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43

HTTP Headers

GET /sounds/agent_message.mp3 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: nginx
date: Fri, 19 Apr 2024 17:19:02 GMT
content-type: audio/mpeg
content-length: 3760
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "661fba80-eb0"
expires: Sun, 19 May 2024 17:06:40 GMT
last-modified: Wed, 17 Apr 2024 12:03:12 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T17:06:40+00:00
x-node: m9-up-gc91
content-range: bytes 0-3759/3760
X-Firefox-Spdy: h2

code.jivosite.com/sounds/notification.mp3

193.17.93.93

206 Partial Content

5.8 kB

URL GET HTTP/2
code.jivosite.com/sounds/notification.mp3
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
Size
5.8 kB (5808 bytes)
Hash
9aa341af370c4e59155717260ba0f282
0c1216ecead8d1409557c843d96202c063f3f252
1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab

HTTP Headers

GET /sounds/notification.mp3 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: nginx
date: Fri, 19 Apr 2024 17:19:02 GMT
content-type: audio/mpeg
content-length: 5808
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "661fba80-16b0"
expires: Sun, 19 May 2024 17:09:58 GMT
last-modified: Wed, 17 Apr 2024 12:03:12 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T17:09:58+00:00
x-node: m9-up-gc19
content-range: bytes 0-5807/5808
X-Firefox-Spdy: h2

code.jivosite.com/sounds/outgoing_message.mp3

193.17.93.93

206 Partial Content

5.0 kB

URL GET HTTP/2
code.jivosite.com/sounds/outgoing_message.mp3
IP
193.17.93.93:443
ASN
#210756 EdgeCenter LLC

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type
MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Size
5.0 kB (5014 bytes)
Hash
7bf3e4962a5ecf1f8cbcc2ff3428f531
f75c694461a643d2e096ae8d0f6c1a9d19602eee
d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11

HTTP Headers

GET /sounds/outgoing_message.mp3 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: nginx
date: Fri, 19 Apr 2024 17:19:02 GMT
content-type: audio/mpeg
content-length: 5014
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "661fba80-1396"
expires: Sun, 19 May 2024 17:14:08 GMT
last-modified: Wed, 17 Apr 2024 12:03:12 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2024-04-19T17:14:08+00:00
x-node: m9-up-gc81
content-range: bytes 0-5013/5014
X-Firefox-Spdy: h2

www-kraken-app.com/wallet/ver_online.php

172.67.181.187

200 OK

5.6 kB

URL GET HTTP/3
www-kraken-app.com/wallet/ver_online.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
data
Size
5.6 kB (5576 bytes)
Hash
11601e02d0fe94df59d056722f244d17
cc302b503d3b4d6ed0744802e6d8bd521c73430f
fdf16473f4fb5d38850e79bc198afb46f610ad9b1fdb43044b936155d804360d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/ver_online.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:07 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNtqjstshkRbx3px1T3DWv0vHNWyy%2BZ3X%2BgpuC%2BZKzRqUG8F1D4ImL%2F3wy9ShKSe%2BMv1ehrV80yJbLJ4KUCx6%2FS4Ys3G0nagf38VCPxl%2Bt8JyhKxk8IagEXPAkDGNYT%2B9%2FCO5c4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8ec54db256cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/ver_online.php

172.67.181.187

200 OK

8.7 kB

URL GET HTTP/3
www-kraken-app.com/wallet/ver_online.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
data
Size
8.7 kB (8652 bytes)
Hash
9ff7b643a4c6bd4692457b19db47a9c3
080b4947ffd52974c4dc74b2d9c01f67fd2f1cea
37bc51885515edb1bf7ccff610214e3dbcdd92591dd4872b45d6f34b536c8cb4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/ver_online.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:05 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8v3dBez4mlLwWAJ3p30GMm%2B15b498chIXK2flkZwgk24ob3Usb50RPMOo9MuuFVZdJ9wtsJrgTis%2BEsWqNePxXrnNG7079OWTXBb%2FQrBcVh13PgxD8FiFd85hkYW56mBKyfQ7B8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8ebd6d2756cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/ver_online.php

172.67.181.187

200 OK

11 kB

URL GET HTTP/3
www-kraken-app.com/wallet/ver_online.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
data
Size
11 kB (10679 bytes)
Hash
cfe0e69aa64057160f7927f821278eab
29319849b64004c944a5659f5796b974a81e5178
4a9898f31bf7d76e0c4fe9028df2028547a5af937f07deaf8e37f48b1793e1be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/ver_online.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:10 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8UXZEmQlQSFULJ8yXunUCHmt2mQSv6ge%2F0pliilKnceHxGY12Yfmvo1jIiOSOQqcFKFbDbUgITISzgkzECGvwFeNQ7UXU1aOxILW5y%2FWz%2Fz4XF1NCO24qCPn3CNpcr73PJDSBfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8edcbd7356cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/ver_online.php

172.67.181.187

200 OK

7.6 kB

URL GET HTTP/3
www-kraken-app.com/wallet/ver_online.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
data
Size
7.6 kB (7551 bytes)
Hash
25b3209c7b34b8e84badcdeab0e16345
d14021ed97d3cc15d4aa2b7116299a4b10677610
980f011d0580f970bfba520e1890ba6d1ae21ac4124c4e3d420253ee7a8a8d0e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/ver_online.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wY0A59DpppKpQRRL%2FjWWyffo7cwaE6cT1wSw%2BxlNxbuRzEVpN03Z1YXtVJbJwjG%2FnEPkfvceiLyua4%2Fi37KaHW2jU3v1LL5EQlK4mDN1RWe3G3WMO5lWJ1dpXKhQwp2i7d5NW6k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8ecd1d7556cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/301d47e576f4b4f0.css

172.67.181.187

200 OK

8.9 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/css/301d47e576f4b4f0.css
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
ASCII text, with very long lines (9631), with no line terminators
Size
8.9 kB (8885 bytes)
Hash
be3ef28e6a6a2f0af23ce75135c82e49
f9993e5bcddc5080e6c8e8dc778a3246a2ce39db
94cb7cb818a0794c2c8e1f12c3422dc5b3ebb15c0e8dd49ff7109833d67cc6f1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/301d47e576f4b4f0.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 18:02:08 GMT
etag: W/"22b5-609a7e2bbb0bb"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fa6lWAb5QOYQmDJ%2F9DtxnA4%2FR0%2FniH69i49Rti%2FZA5PLXJOk0HGNEnjJIn2F%2FPw3cWa%2FCfNNsaMUxqPAE2AlpwKKHQipiozKmSLst8T600ROcWc2pHiHxd7FBgqEf%2F9qzXFYRKw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98bdd856cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/4cda4f9c0990f282.css

0.0.0.0

0 B

URL GET
www-kraken-app.com/assets-kraken/css/4cda4f9c0990f282.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/4cda4f9c0990f282.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

www-kraken-app.com/wallet/main_.php

172.67.181.187

200 OK

0 B

URL GET HTTP/3
www-kraken-app.com/wallet/main_.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/main_.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:20 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5e6S%2FQn8WwDGSLDXLfRfSf5lmrpQZwSvTahez7BehmgPQSjosexOUV3TlEP7yqb8Qqw2u9GzdJU2LzsA%2FsUIGNoA653zBVF%2B58omyGBoV7llB7%2B2lfFrCDiSiEpYR2vhef%2Ft%2F%2FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8f1afdce56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/763261567d26ffd6.css

172.67.181.187

200 OK

63 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/css/763261567d26ffd6.css
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
assembler source, ASCII text, with CRLF line terminators
Size
63 kB (62722 bytes)
Hash
3516d4d7eb1a1c52082b86781f469950
0cad6172cb66560e870d9a4ad26ca0ae13f8d9b6
8ff1dc906719289acc9981b30d4c15a65152c1eff2f3e4e68b2f2fd6357d8f03

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/763261567d26ffd6.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 18:02:15 GMT
etag: W/"f502-609a7e32e1bc4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KnG9k7zu1P6NBxxRfqUx64e8J58gYIetuJTKiFbxasXtW2TQfu9aKi7AlwvjYy6OstJ6%2BiBBBbvS8ARuU0XDsxwqfbACrx3%2FSRwLXWgXgn6KszMyD111ojry%2B9DHdIkg2M%2BxTVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98bdd256cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/main_.php

172.67.181.187

200 OK

0 B

URL GET HTTP/3
www-kraken-app.com/wallet/main_.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/main_.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:04 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3lgSr7p3SJcVD3vhbakw1Jms1neMGsxjYRm78Eeth12bbLpH92qDzotW%2FYuQfRvQRbzaeuyoBC4aq3546tTp9yCIC7izwU1JVbDjZc6ymip13noxmg3HcQwuOH2182pivr%2FqwY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8eb6bddb56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/images/favicon-16x16.png

172.67.181.187

200 OK

178 B

URL GET HTTP/3
www-kraken-app.com/assets-kraken/images/favicon-16x16.png
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
RIFF (little-endian) data, Web/P image
Size
178 B (178 bytes)
Hash
0c556a3295a3113865a85393573a8e44
eb7983623a012fb4d9367487b91abcdbf98cb709
e88fea409aebc5039b6cfd620e8544c85b352f846b232f64eab4e6be21504c72

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/images/favicon-16x16.png HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: image/png
content-length: 178
last-modified: Wed, 08 Nov 2023 15:15:45 GMT
etag: "b2-609a58fb227c1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2FOMWRXhNwJH541Y7cmn8gIPeVSxo2XRXaxV84nl6Vv3MKSFWjaCPGdLbzC8ZWvSZSqZOGEM4dOtqaujS%2BnMqR7TqpnIwimmxabs6bsXjJKFkib0yi4kRuzoHDFmF8jmRbj2Tmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8ea16fac56cb-OSL
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/1de9fd77b2b2f1f8.css

0.0.0.0

0 B

URL GET
www-kraken-app.com/assets-kraken/css/1de9fd77b2b2f1f8.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/1de9fd77b2b2f1f8.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

telemetry.jivosite.com/w

94.139.253.159

204 No Content

0 B

URL POST HTTP/1.1
telemetry.jivosite.com/w
IP
94.139.253.159:443
ASN
#208677 Cloud.ru

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoDaddy.com, Inc.
Subject*.jivosite.com
Fingerprint48:23:E2:E5:0B:0A:4E:4F:CA:AD:65:27:8E:22:2A:8F:87:B3:6D:F4
ValidityWed, 05 Apr 2023 11:26:25 GMT - Mon, 06 May 2024 11:26:25 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /w HTTP/1.1
Host: telemetry.jivosite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 102
Origin: https://www-kraken-app.com
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Server: JivoTelemetry/0.9.4
Date: Fri, 19 Apr 2024 17:19:00 GMT

www-kraken-app.com/assets/data/css/login.css

172.67.181.187

200 OK

636 B

URL GET HTTP/3
www-kraken-app.com/assets/data/css/login.css
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
ASCII text, with very long lines (702), with no line terminators
Size
636 B (636 bytes)
Hash
f6d89b8099a677858a1c2dffd99e828b
f5f2832f7330fead0a904ff4aac897ce0fcb194a
00cc0ef873d8aa80e936eeb3480f591dbd24a29e8a2e53620e0183d9c2b64466

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets/data/css/login.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: text/css
last-modified: Wed, 18 Oct 2023 23:10:35 GMT
etag: W/"27c-60805bf316b2b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YXNEJs7b115ZNczHd4df6ThH3LRIyovu6gizn3729gkkwszDJIgJ9FWHVbdGFAPwCDRhxwNSAXUuHZp48P5%2FdquSf305JOKLuB4ZZl1HOKyq9wfxJua3U0PDpRdqHYcjDEfZBjM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98cddf56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/images/bg-left.0d8061f6.svg

172.67.181.187

200 OK

151 B

URL GET HTTP/3
www-kraken-app.com/assets-kraken/images/bg-left.0d8061f6.svg
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
SVG Scalable Vector Graphics image
Size
151 B (151 bytes)
Hash
985bd9ab6b8f2a795e3fa6c41e27ab37
4b65d2163b8c89d853a341252c1e8135511fb8e7
51d2afb48a827e8e9eae86cfd4790376d72e71db34840e8f98e4bdd10e07af0f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/images/bg-left.0d8061f6.svg HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/index.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 15:25:48 GMT
etag: W/"97-609a5b3ad2f21"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2BJdYAhz%2FSAP2%2BNxI%2BWaS%2BpBCLTBuq9iTDaMbCZhZyY7tjrDOv4EgVOYPui436HE%2BpnbDZuLov%2FQ%2B2%2FbYwdZqUGBKjmVhLb0qyUBCOtyb%2FsTRKa017KLTQHZ9gVjMi4F9svRe%2B8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d7a8456cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/images/apple-touch-icon.png

172.67.181.187

200 OK

1.5 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/images/apple-touch-icon.png
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
RIFF (little-endian) data, Web/P image
Size
1.5 kB (1496 bytes)
Hash
80c5e26c88ed0b09beaec5a4b538f784
f75e3a31384300c50fac2da1dc99e3a651c3b101
bdaac31ec1da386c448e650588f29b5a4fa86dc83387c446f41fb9c202bdde85

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/images/apple-touch-icon.png HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: image/png
content-length: 1496
last-modified: Wed, 08 Nov 2023 15:15:30 GMT
etag: "5d8-609a58ed0c698"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2BNc9wH5cgdY5bEVtPfDpKrnt5t8X6Yq5MXjkhv1%2FmAQgnJkRH4seQjT7qn46csHS7lOFekTNEjRkoRv%2FvxVum5R2YBVlE6TUVe%2Fu1DsuLKc8ioJOJqypFSxB1dA3rSu0aZYmCE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8ea16fa756cb-OSL
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/51cacc019381682f.css

172.67.181.187

200 OK

25 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/css/51cacc019381682f.css
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
ASCII text, with CRLF line terminators
Size
25 kB (25224 bytes)
Hash
1fe523e440672586d6a4d76362bccd96
7333c2f9565bab5e3d26305f7c3bb8f89fcb4759
fec0754bc6d1d7f3e02d33d860c1f37ac46fae1609f23af3e821ab86b366ff67

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/51cacc019381682f.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 18:02:04 GMT
etag: W/"6288-609a7e2816e66"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5JsghA3zEZjSG%2BaY%2BWMHUPuvpVHpiE%2F66oSsoB3TuKEA31BkNnNcK%2Bg4AvgjPNS0CIMRLuwOWtRa%2BxJvoRZzoBBpukfnBmSP382xfsm40EihNuJlY6x44%2FbSaaB3zAsWyGQ4ZZ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98bdd456cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/e686c18fe5f7b42e.css

0.0.0.0

0 B

URL GET
www-kraken-app.com/assets-kraken/css/e686c18fe5f7b42e.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/e686c18fe5f7b42e.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

www-kraken-app.com/wallet/main_.php

172.67.181.187

200 OK

0 B

URL GET HTTP/3
www-kraken-app.com/wallet/main_.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/main_.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9gp6%2FcqCsRkifMNv2WZbTgzmmWmUTGhb6xN00C5s9XKzxfvvjJ1OqlNv3VidkJKwYe4eH%2BWTPhz2ujiarsSvHPQsameN%2Fl3pyCoe0k%2BGE35jSMgyrtzVdn7ZjGUEs4XAj3koW%2BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8ecfc87156cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/index.css

172.67.181.187

200 OK

34 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/css/index.css
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
ASCII text, with CRLF line terminators
Size
34 kB (34054 bytes)
Hash
5e508604fd18ee0d0b590602722c5aff
4f3ad36b368c4c326e8d6d94c90756aa0da4732c
a75f8c946e030bb2917cd50a0abd47ab4f9c6cd5a9e344384f16bd9840ed84d3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/index.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 18:01:51 GMT
etag: W/"8506-609a7e1bfb5af"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ks0VlI5R8GunwYNuSOqI2Vg%2BFoM6ovco3I%2FmFpp0QRABAyllxL%2BooFYoEnfqyYTJlNXA0mTRv2FjJ8Ldfeys4idKPThav70msTdFd48xgdgcHWHFxm4%2FSNvc61SeKDXDDZtSopY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98bdd956cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/dados_comando.js

172.67.181.187

200 OK

9.1 kB

URL GET HTTP/3
www-kraken-app.com/wallet/dados_comando.js
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (9985), with no line terminators
Size
9.1 kB (9108 bytes)
Hash
0861c1fc189fdf87b6ecf5e11eea7743
ce25265f914624c8f5fe7838e7ba416b4082e670
51f4b09c2d955caca3cd41a18599e8eb82627bddc022996bdbcb5890eba62ce3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/dados_comando.js HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 19:43:56 GMT
etag: W/"2394-60b1367f8fabc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Byrlcw1vabKeZ6TR7KuPsJuuRnjUL7LDbEFFIEcU0kB8438bI%2BBwx5Q8IlXlX23GOrkn%2BtmsFXnn6dBDlkb5EkkVRb8EY%2Bxe5lUvFb174yX%2FHn%2F6Nrr9Ce6iXS6BctGixgfEoEw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e98cde756cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/main_.php

172.67.181.187

200 OK

0 B

URL GET HTTP/3
www-kraken-app.com/wallet/main_.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/main_.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:16 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y39Ei1lS5SZhP7yuOZlrp9WhfRv6C31sISSX3kDslBg3IBXNN4Li51odvms6KKl3wocdfXUL5yS8DcGRVRRZvFa3MiIQuL%2F75Db6J%2BM0lGTqkByBNsCF2EPtRo4BqvE0jlzOZ6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8f01ed8056cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/images/bg-right.cc0f5605.svg

172.67.181.187

200 OK

334 B

URL GET HTTP/3
www-kraken-app.com/assets-kraken/images/bg-right.cc0f5605.svg
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
SVG Scalable Vector Graphics image
Size
334 B (334 bytes)
Hash
5e0bd912f525091e9e2795d065294205
41d972106837a85b632a22a86b52626ffb416e40
3143e91cba044e2bd32e5304c68c4ebfa81b0fa8cd1cc1ca628abed802232c04

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/images/bg-right.cc0f5605.svg HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/index.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:00 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 15:25:52 GMT
etag: W/"14e-609a5b3dc9ab0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YyrcTJgJHYeEsZEeW5bXknRmV%2B8YPmGwRb4aPE9rOqklGUoWtLwsryqVYSoixiCAlxhbVa7dVQ0dMF34CZcWUTP2kXyxqUygY150fZDyw%2F5ul77kenj3%2BYIrsJd1OJ6Gko9C2wQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d7a8756cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/css/27309f38b68391a6.css

0.0.0.0

0 B

URL GET
www-kraken-app.com/assets-kraken/css/27309f38b68391a6.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/css/27309f38b68391a6.css HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

www-kraken-app.com/wallet/main_.php

172.67.181.187

200 OK

0 B

URL GET HTTP/3
www-kraken-app.com/wallet/main_.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/main_.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:12 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=deIf4GwhlTfhwKjlH3%2F6RO8IQay7E%2FhKFeFAcycDqUI3XuBVoQsUwFmN5lC93nDRMv8fhpp6MxDM%2FGlFc0dJyZ80vZ6s7svJQjV7qxXdNfwJCsqfoh2WIGWULkBNrubdc5UHUxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8ee8da0d56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/assets-kraken/images/sign-in.498bf30c.svg

172.67.181.187

200 OK

25 kB

URL GET HTTP/3
www-kraken-app.com/assets-kraken/images/sign-in.498bf30c.svg
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type
SVG Scalable Vector Graphics image
Size
25 kB (25065 bytes)
Hash
087d948c129a270c7195605c378be21c
6244e7ed71b41eee9cf590e14eaf658d2e69d9b0
b034f4c4f0cbb897a07d312624bcc00303e651125ac0247a2cba0ee08b493741

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /assets-kraken/images/sign-in.498bf30c.svg HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/assets-kraken/css/index.css
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: image/svg+xml
last-modified: Wed, 08 Nov 2023 15:24:56 GMT
etag: W/"61e9-609a5b0860d7a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mT6cFsIwwmdGZ8G%2Fkvy5UczGFpsucdt3kpkCFpP9KiB6RLxNHtza2Yogg%2FmAOg51JZMHtC5ijJ94HwT%2FGWyxha3PNhxsMuGhH%2BKk9BA%2FdYwLWX2eISqUV%2BoNGbRP2wEwQ8DQX%2F4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e8e9d7a8256cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www-kraken-app.com/wallet/main_.php

172.67.181.187

200 OK

0 B

URL GET HTTP/3
www-kraken-app.com/wallet/main_.php
IP
172.67.181.187:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Certificate
IssuerGoogle Trust Services LLC
Subjectwww-kraken-app.com
Fingerprint16:39:36:C0:37:36:12:2B:6D:72:48:B3:99:F7:47:22:AF:50:D0:22
ValidityThu, 18 Apr 2024 10:39:07 GMT - Wed, 17 Jul 2024 10:39:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet/main_.php HTTP/1.1
Host: www-kraken-app.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www-kraken-app.com/wallet/?ip=34.217.2.143&key=jrYOyMDvRjyTwoBOSkPZcrYiXEmcFiAELZdGEGxyqlrYtTMQTAggDsHLfodC
Cookie: PHPSESSID=mh0qc3ekmvhd2f6sul0mqb2jk7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:19:01 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BugLGUmkOaPFOYC853bNH25FGySuUZAo0cZeaPV%2FUG9%2FRQGukJoTd7eVXtaktSTGjoCDtHWdpTdRYfYeOl8IYbMa1Yy7omDa127l7pr5WSygaAqhyIGlCsMe08i6nvv%2Bp%2FOG3VM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e8e9dbac656cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash