{"report_id":"4401ff8c-78f4-484c-aa9c-d61e5a8def8b","version":6,"status":"done","tags":[],"date":"2026-02-27T06:44:08Z","url":{"schema":"http","addr":"admin.kraken-ni.vip","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":0,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"admin.kraken-ni.vip/#/","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"title":"MSCI","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"admin.kraken-ni.vip","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":0,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T06:44:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.mycurrency.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-06-29","domain_rank":0,"first_seen":"2016-11-25T08:09:44Z","last_seen":"2026-02-20T19:59:39.614677Z","alert_count":0,"request_count":1,"received_data":106012,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"admin.kraken-ni.vip","ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-27T05:48:35.2771Z","last_seen":"2026-02-27T05:48:35.2771Z","alert_count":48,"request_count":48,"received_data":3150430,"sent_data":34140,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"admin.zcl232.cn","ip":{"addr":"103.43.191.179","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-05-09","domain_rank":0,"first_seen":"2026-02-27T05:48:35.278461Z","last_seen":"2026-02-27T05:48:35.278461Z","alert_count":0,"request_count":1,"received_data":227,"sent_data":594,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-common-forget~pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~d754bdba.80cb3378.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"453666996b5a9b1ad3dad0c39fe13a07","sha1":"9077dcfe76e14591f583f34c21fb9c3897d2ca55","sha256":"806bff1f90bdb2a7da43a38f8a238c84d7db64620e9698fa7b26bf846f4dafd5","sha512":"397f2f5f48ff13ea603d644c80cf4abe406e60851320286052102a58f62b15ee4b834df6f0a5f52b42255aa87d5bde1f9c9697a125fd7a60ebcd1f7371f05c08","ssdeep":"768:aD18dyHhA9ueoy68Z0v1FJRxEdWnZmmaYGW9u8thRrvDXz:q+oHenwTRK0Taan","tlshash":"28e307c2fdc860048d2fd705954636fe9e2ffa230255acdaee416f384e2a5d736095ac","size":151349,"data":"","first_seen":"2026-02-27T05:48:40.128238Z","last_seen":"2026-02-27T06:44:11.692623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-fund-assets~pages-fund-fundTransfer~pages-fund-transfer~pages-index-index~pages-market-market~~a6b530f5.cbb86a36.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"89fbfd93f8ff5a8286bcc993f84a8268","sha1":"1e87c8953f4c305b8cfe147b7bf6d283984ed2cc","sha256":"2e3930ed3ee7bba46d84443726263402d91ddb0a4915356d874f283822e6f9ac","sha512":"90abc9a4a969999fd494f0f9b1711edd6b237504df0ce4f0706267eb604db9e0b78403501de5ac0bec6d328ed6bf45b8773c319502e01b38f80da1d813664e9a","ssdeep":"384:3vQP7IcuNi2U4AvIzyHW06QX69OzwYeWBZ1fIft/RHVBgS1aGJoy0EVFcPl0UjJ:MMdUtIf7aGSy0YFcPl0Ud","tlshash":"d473cbc2f5d8301e47a7c745f7412afd5b2aab239201d9d2dcc3ab244e165ee6f2492c","size":76428,"data":"","first_seen":"2026-02-27T05:48:40.092828Z","last_seen":"2026-02-27T06:44:11.703898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/common/js/touch-emulator.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2338fd8911c2da1d34681b47c4294db4","sha1":"3ca961b19678ce094532df0e5e4262a54e086a63","sha256":"119056f233c1069a7b3c58e63366a9771c9e68823b448fd583d3ee4d27b1de21","sha512":"2d7ee9d900213d2c930a2631e91fc49be0c6e04a185e27c7b1e913e4bc844842cd48eb3dcffae684306a3b7738e9bbef198575e21db3311490f0572d3667a787","ssdeep":"192:uOhCaR57Uax9CyWJ5pj7wuly3bRZnGaRbnOPZuPZD1CykZt/igoYIlO8:uHdWTmPZGD0KgSO8","tlshash":"8532701f19e713a200ab332ab7cf5045b03ec0932505a555fcac6fa47f56b794aa92ce","size":11653,"data":"","first_seen":"2026-02-27T05:48:40.145171Z","last_seen":"2026-02-27T06:44:11.692075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-07-27T14:50:18.137455Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/chunk-vendors.caa5b6f9.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8c4f6d155a68bfe434e4fecf00b57e","sha1":"c32ad2d3036bbbdffb64247ef43169ce9fc5b74d","sha256":"4f696a116e4c0565948ad2423dd20aa3af0c4a1635fa50d6c32edae7bb6c5c5c","sha512":"2ca0ff3dfe3e93bcb97eed851d03f3fe0bcfafbf25b964a6105eb822fa8e560dc2e195fdc2a28d7dc76155c68f699beaf16eacb96b8956a6081f62344c2e8b0e","ssdeep":"6144:Xckq/hCGADizri/aBPXZAheJX5SLVr8ZydLp2zp7Y4sq5T3r8P:FqA2zO/AWBIZiL2Fp3r+","tlshash":"ace4f79cb281b0b607e761f5003f220ba13b6968b40ad4d5f279e5d4ad78d8e6127f7c","size":693973,"data":"","first_seen":"2026-02-27T05:48:40.120247Z","last_seen":"2026-02-27T06:44:11.703255Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/index.c5cc223a.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e948e1506bb5d39c3b60ae56f04953","sha1":"0e41ba03ed4e4e72824c27cdc8bf296e815fa51e","sha256":"22fdb43bad85eceb1238306687f6c85a69331ea1a858e9677a523e4ef276c0bd","sha512":"42c0d436abe0125f9b284c82e44c86eea7d46fbe539f89d1d7763be02fdc34c0c2ec309a5b3034b143e1e238138f58637f89b4e6a217ff25cbd14930e57578ce","ssdeep":"24576:vb2SGsaOZdwG1ZAIkKDJ3bys5XrHeg05T5jeq:vaDxeq","tlshash":"70055a87b0c1616812d71601a09f72a8537edd256547b8e9f3c8ba54cbd73ce6322b3b","size":857477,"data":"","first_seen":"2026-02-27T05:48:40.087385Z","last_seen":"2026-02-27T06:44:11.70725Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~74463de0.67996e87.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1a4fabae66fad81218fde9d7f0a9456","sha1":"4627ba9bc7665b7dcbb660d03d60c06577d1d2ec","sha256":"2a1429d09aa4905bb0b0c203e057533d61e1750c9ee528ad7eb94553529d6ac0","sha512":"00baf33ab867ec9cb8113995e6b8231c47a7c21bf3cf960ecd50b494cb23de9a01c942b3bf54cbc6666217a32c2781be21b368063b35b7bcbab68a67ad6302b9","ssdeep":"384:WeIhI8eMCPMpbF+iS9lV3LaJOTyTxLTCwW6FfbIRkke+NbIE2LG3VB/8D2:ZFMNFfiIEwG3T/8i","tlshash":"1c73eab2ffe82004d527c789d74332fcd9abb72b0a016ad6d8416b345e169c7358b62d","size":75391,"data":"","first_seen":"2026-02-27T05:48:40.100141Z","last_seen":"2026-02-27T06:44:11.714038Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-index-index.1478a5bd.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"99f18240f659cc6f2b7402a68cfe8e5e","sha1":"3ac3287f2cc8e950390e77344f6193380be28a7e","sha256":"ab8f385b1d311552907403b0af16000ecf67bdba20154fa9141f3868539b4a9f","sha512":"075ff2707a678f973130d90621e884def3230ae2ee82063d22588c668990613179409324a8af1d815bde49abe009309e7e6f53f7410defebe6545eaacb620fbb","ssdeep":"6144:Fe4wbg8VIeosToWAsI8xo64qA8HAegogM1gK4GYsr4V8LcCccicpU6e0mcfUiIU/:E45lRj4CK","tlshash":"8aa4eed2f6c82118857bcb02e546b6fc9e3aba639315a8c2e981bf345f175c73b2451c","size":486964,"data":"","first_seen":"2026-02-27T05:48:40.124815Z","last_seen":"2026-02-27T06:44:11.696098Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-07-27T15:34:16.31276Z","times_seen":1431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-07-27T14:50:18.138728Z","times_seen":1552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~f86d5057.9c49241c.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e51005850bfeefdad9ebf35f3df66bce","sha1":"bbf8ff8c4f1d08c75e836bee07c363cc17a60c93","sha256":"d8ca790dd7b59499991f7b6ccc6ff5af404d4b58b44a42417a7de33e8848157b","sha512":"adf7cb8540a7b8494e119b5814d521163766680c77e448910287349f3dbbefcc294edb04420b7773415a066a964ece864e25c35e588adb525dda061cbbbb99d6","ssdeep":"768:D7gQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wX5d0tCAWNjZh/tpptzR:fsYId0FHoMqu7NdEAaM2OJuAnuarDibW","tlshash":"d2c3abd2f6c82844566fcf4e9341b3fcbbbaba2342697863e4622f244f772d6250455c","size":123960,"data":"","first_seen":"2026-02-27T05:48:40.0757Z","last_seen":"2026-02-27T06:44:11.707996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/nav/3.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/nav/3.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-469\"\r\nexpires: Sun, 29 Mar 2026 06:43:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"eb27dd47695413d11d15a1a64c8a5792","sha1":"4037afcc092286a0eae270a95867f7241960e833","sha256":"4757128a96937cf4c162bae074f51747732427989d585ba9e917b13922fd3142","sha512":"2e594138e583c0eaa79653c5e6708b1946adf3ab891dbe9d992a9ba822852cde0b45f072d08918e00f83db8ac164ff82941c72da35db69dfd42df3dbadd8257f","ssdeep":"","tlshash":"8221f9c3b0371cf456e7da1362bffca1321619aab42826b7fe2040966076dc62d35390","first_seen":"2026-02-27T05:48:40.108186Z","last_seen":"2026-02-27T06:44:11.686728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/img/notify.7457eaf5.svg","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/img/notify.7457eaf5.svg HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6InBpbEhQXC9YaTdMTUluKzQrRGlcL1U2Zz09IiwidmFsdWUiOiJTcUhPT25JeFZkb3JJcTQ2b3M5Wmc5WTFDdnAwWUVIMmU0b1NFUXBneDdFam8yY0p2ZVpDNWtTaEluc0VGV1pYU042WEJVeWJFaWtmWE1jQnJDWk9vVGZiQ045NjJjekZOS0ZuK0x3VTVTU2dQMDBjQk1uZEV0alNRblZKRk91dSIsIm1hYyI6IjhjNjMyOGI1NDhkNTA2ZTYxMzA3OTVjMWQ2ZTA2YWE0NDQ5ZTc2MDI5ZmVhYzc2ZDU4ZjYxYzhiYTIwZGNiMjkifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 232\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-e8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7457eaf536494ae5a62ac5a29ef73bf6","sha1":"954d9bd34e7a267796abff8813f3ef09bba893f1","sha256":"3c4f6e001108845fa863675de268ca0c05fb4a9c3031201050821e8f07ab737e","sha512":"cb9a56cd4484e4de95f5375b64bb9256cbd40f0f3511198bde409778292d5cca8cb380be315dc4a112e8a9ff0616861457324bbc55270cb8f5a013cd55ef873e","ssdeep":"","tlshash":"7fd0a765c3580d2cb5614730ff34b374107571d5160c5069d8612071e2149ae78379e8","first_seen":"2025-08-02T22:37:01.27165Z","last_seen":"2026-07-01T05:09:09.371443Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1315,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/news/list","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://admin.kraken-ni.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=zh"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IldONVRvcjVuV2ZKNXVBNzFBdmM0ZEE9PSIsInZhbHVlIjoieUxWTzBReWphUHhhRW1pSU1qc0hXcUt1aXhnemxuaDBIVDlsbW1PT3g1K1VWU0lwREJcL2lBN1pvTHJLaEhRcEVwcCtqRVVQMG5CWEdLNW9VaUUyQ2hhQWpJaHdocHM5Z2phd0x3R0M1SEhFR3ZFYVZFcldrTzJxd00wSEkwRGtoIiwibWFjIjoiM2Q1OGJjM2NjMWI4MGNhYTAzMmViYzVlZWJlZmIwNzAzNDQxMWM5MTY4ZmQ4N2Y0MDFhZjg1M2YyY2Y2NTMwOSJ9; expires=Fri, 27-Feb-2026 08:43:50 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":369,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"00b3e421d31e11ad8d21dc128f3b3f7b","sha1":"1bd5619fdf5f7428e386116f8a5b22c36d47b84f","sha256":"54fab62aa742a781aad6bb279f8f1da58ed6a973168df187ad8974a562ff9ac4","sha512":"3b049b722b61848600ce40f12f2794320f2a961b83efece3bfb4b32072580282e6c0ddb4510fecdba98ac7f2c5aaf8e7546c8765fd60c35fbf9427e914a407f0","ssdeep":"","tlshash":"2ee0c0eab744acfb8bd613c16c0f75d5c6df3151c640074d09f4999dc31c098542b82b","first_seen":"2026-02-27T05:48:40.090617Z","last_seen":"2026-02-27T06:44:11.688555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/img/tubi.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/img/tubi.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 739\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-2e3\"\r\nexpires: Sun, 29 Mar 2026 06:43:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced","md5":"323d84fee056f90ade9f8dcc376ede15","sha1":"e453973043ebc676da05d84e6b6f8032bc92d7ba","sha256":"766962b5234990a788b08ae21f01e6f52e87a9174cec1f21ce1b7fed7de0b4fd","sha512":"7aa1dee269c537c4acbfdb8b18778b0785e0efa4bc406f1d51d7b687999bf44585c31748498374c24ee5499729aec1f51fb81e3e1785cbf6c29abe123252043a","ssdeep":"","tlshash":"6f0165ceb2196928e1114d7f004190e6386e702de6566a1d4c298bf5ba4e7c48847649","first_seen":"2026-02-27T05:48:40.149175Z","last_seen":"2026-02-27T06:44:11.689109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/img/chongzhi.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/img/chongzhi.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-2268\"\r\nexpires: Sun, 29 Mar 2026 06:43:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"e8717d552b52e83a87d40f0a10974925","sha1":"d4cae4d0bbaceaef88e32e741103a9a58d4a13f2","sha256":"e7d1237c9a1c75dbe8558349f03f560fe7cb594c84d8bd3ae463136c09643c31","sha512":"3ef52be23aafb3098ff4179cc9f4bd8ddfa59c6ce48c4ee9a4c39d2fe56075523dead789392ce5dffd5de728e74811174a0f32d438c36d58a50285be129c7864","ssdeep":"192:xCjC5Mr2xhjRDEPFsdGncPXeIwwXDHZ9L9A9j:xC25M2NSP6dGncX/JXF3A9j","tlshash":"c002af2660bbdb268229fbbb74d703df09d8bf48144158d46f8976254a2ac0ab9710b3","first_seen":"2026-02-27T05:48:40.095066Z","last_seen":"2026-02-27T06:44:11.689699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/SNT.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:52.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/SNT.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-790\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"db4200041404ef8e2c9bb79f3554486f","sha1":"489240c6c6ae536c7608b717156e3d148c332513","sha256":"8702d0c2c01f6f4dd23f1e2f64615c54564c34f4c787a0f3ea1dd0abbdbdec99","sha512":"792b7310aff7de37847e897eb8389fcdde19c3cdbeef1e596a21f45ac24dcef23f6cbd031f8d84b6067dac8805ec39f3cb1cac7360ba23cfc674af1aa3568a26","ssdeep":"","tlshash":"c941e89b6ee0d9ada4c322160f82ecac1cb18f062fe12244390e52274264c59c9fb767","first_seen":"2026-02-27T05:48:40.13926Z","last_seen":"2026-02-27T06:44:11.69025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/WICC.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:52.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/WICC.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-1047\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"6188460f32fa58013a74d116db3500cc","sha1":"d3fb0f116345bd57436e6f79c5d1e486c37054f3","sha256":"155794447551c255eb03dfec6d265b8937fb0787bff52824cb431f9293fe8697","sha512":"e88b47e2a8d13fc01fef76129ce94680e1790ea814178a913e2eb0fb41c88b6dab17377e11a9b00bd23ca47f01041542e6896006cf8b13bf8b466085b717f7c8","ssdeep":"96:U02gMF9AKFEdU7Qzc/Qe+8laxQziryEVqh90eMh6ZF02ixjfwj:UhPcJcVTlciitVqqhL7I","tlshash":"3b815da6dc39e97fb6e44709fa0dc245342a24ab035dc45d8cacf679da1159e04dd0e0","first_seen":"2026-02-27T05:48:40.098214Z","last_seen":"2026-02-27T06:44:11.690852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/TRX.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:52.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/TRX.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-c7a\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2568c43c57be5cf2d8de050a47830ea4","sha1":"713d63de851155c0d9b84dbc60f7bf3949b7f2ba","sha256":"260ad2817e77603c92c2f2af97ce6a65537808ef2b186bff2ac6ec41c9a1fb01","sha512":"c41a21f98cc4d1503653857f40cb0f9c34da6260ea00fa6b632caa9b38cf7847266ff45bf5ca4e7ac7f77c1d621c45fce9146f41d72d4cbfa6f32a6630878273","ssdeep":"","tlshash":"66613a1ac631e029e49fc46886137a9b5d73c9b68e4b0759943a1f478806e88216be7b","first_seen":"2026-02-27T05:48:40.085032Z","last_seen":"2026-02-27T06:44:11.691549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/common/js/touch-emulator.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:46.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/common/js/touch-emulator.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-2d85\"\r\nexpires: Fri, 27 Feb 2026 18:43:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2338fd8911c2da1d34681b47c4294db4","sha1":"3ca961b19678ce094532df0e5e4262a54e086a63","sha256":"119056f233c1069a7b3c58e63366a9771c9e68823b448fd583d3ee4d27b1de21","sha512":"2d7ee9d900213d2c930a2631e91fc49be0c6e04a185e27c7b1e913e4bc844842cd48eb3dcffae684306a3b7738e9bbef198575e21db3311490f0572d3667a787","ssdeep":"192:uOhCaR57Uax9CyWJ5pj7wuly3bRZnGaRbnOPZuPZD1CykZt/igoYIlO8:uHdWTmPZGD0KgSO8","tlshash":"8532701f19e713a200ab332ab7cf5045b03ec0932505a555fcac6fa47f56b794aa92ce","first_seen":"2026-02-27T05:48:40.145171Z","last_seen":"2026-02-27T06:44:11.692075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-common-forget~pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~d754bdba.80cb3378.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:48.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/pages-common-forget~pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~d754bdba.80cb3378.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-24fe7\"\r\nexpires: Fri, 27 Feb 2026 18:43:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151527,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65358), with no line terminators","md5":"453666996b5a9b1ad3dad0c39fe13a07","sha1":"9077dcfe76e14591f583f34c21fb9c3897d2ca55","sha256":"806bff1f90bdb2a7da43a38f8a238c84d7db64620e9698fa7b26bf846f4dafd5","sha512":"397f2f5f48ff13ea603d644c80cf4abe406e60851320286052102a58f62b15ee4b834df6f0a5f52b42255aa87d5bde1f9c9697a125fd7a60ebcd1f7371f05c08","ssdeep":"768:aD18dyHhA9ueoy68Z0v1FJRxEdWnZmmaYGW9u8thRrvDXz:q+oHenwTRK0Taan","tlshash":"28e307c2fdc860048d2fd705954636fe9e2ffa230255acdaee416f384e2a5d736095ac","first_seen":"2026-02-27T05:48:40.128238Z","last_seen":"2026-02-27T06:44:11.692623Z","times_seen":2,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"admin.zcl232.cn/socket.io/?EIO=3\u0026transport=websocket","fqdn":"admin.zcl232.cn","domain":"zcl232.cn","tld":"cn"},"ip":{"addr":"103.43.191.179","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.zcl232.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 12:10:57 GMT","end":"Wed, 22 Apr 2026 12:10:56 GMT"},"fingerprint":{"sha1":"54:66:8A:B0:E3:AB:BC:54:48:23:28:4C:81:93:75:0E:21:86:6C:1F","sha256":"63:52:58:9C:68:0C:B4:D6:34:B3:EF:8C:C4:5C:87:D4:98:F9:56:FC:44:C7:CD:B7:5C:3D:4F:D8:4C:93:0F:E9"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: admin.zcl232.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://admin.kraken-ni.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tU2mt52FYB7y2IpVX6iuVQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Fri, 27 Feb 2026 06:43:50 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: B5uBc8iwBnbeYh9OebQwyo1aNgg=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":2062,"timings":{"blocked":0,"dns":690,"connect":913,"send":0,"wait":226,"receive":0,"ssl":921},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/news/list","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://admin.kraken-ni.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=zh"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6Imh4djhZWlpKMVhHbkwyWm54U3U5SUE9PSIsInZhbHVlIjoieGU2c3g3UjE4aDJzelZaXC9YSjZQc1pMcnBzYitBT2tJOVRhcmRtdGxQSW1zbzI5bTNtdVBjNlVKTUE4QUp0bHgwczFVN3k3UUpWeTdSSFdPbXNQb09yUzBlRjBDNFBWbjNVQVlsRzhWNEtWVmt4NUxUengxcmZ6dUpwVFVLaENuIiwibWFjIjoiNWZiMTE2M2E5M2JjNzVhYzdhZjQzNmUzNGFmZmQ4NjdjZjk4ZmVmY2M3MjE1ZjMwM2M1YTg0ZWU4N2UzZmY0NCJ9; expires=Fri, 27-Feb-2026 08:43:50 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"164b3c54fd5ea49874736ac5afb58142","sha1":"b68703e1ee34163d7eb8670992b8a75945267f97","sha256":"8b12a738e6b014d7bf8186b3c43bbedb3f7dceaa587d439aee02cbc339fa1090","sha512":"3af8644852d3d39a997a31fd9506df3a722234cc194b1fed07b23aca9ed3ed3821a6e42e96f33bf4f816a7ecb012229983f9f63a61586aa61a5143950574e512","ssdeep":"","tlshash":"d3e02bae9d80c8bbd1446382a407f05493cd61d28f45070d5fc18cd8cabc6864423883","first_seen":"2026-02-27T05:48:40.131773Z","last_seen":"2026-02-27T06:44:11.693669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/puhui.ttf","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/puhui.ttf HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 114072\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-1bd98\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114072,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh,            ","md5":"96669e515a783cb097faa49d1db8003c","sha1":"d8d7a2b9df8ca9b7904f90992e58d9328e2e330e","sha256":"56292fb7d6391f60ec54fdd70864cfa44c21f0227c87f190e0b1884d61006983","sha512":"926d814e95d0155e42d9857f7add5cb444d53600dbf92d8b681a0b5bec27e621b2af5411dbe0241dcfa3511bd8df7be3b3571e38204df82cbd8f5b3f79ab4e1f","ssdeep":"1536:J4NShFmEgaaQSZhwb6sdQOYyzrnTtp5Jt6jvmIN7nos+XtjriAX3s+dm:JckVCZsqOYyz/tf/EeI7oNJ3MEm","tlshash":"f0b36c939b5a7816dc32bdfc4845a34bbdc0c4a40756d2132f7a182e48d7dd80badeb8","first_seen":"2023-10-29T16:17:57Z","last_seen":"2026-07-09T16:09:08.054777Z","times_seen":150,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":709,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mycurrency.net/=US","fqdn":"www.mycurrency.net","domain":"mycurrency.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycurrency.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 14:11:44 GMT","end":"Sat, 23 May 2026 15:10:28 GMT"},"fingerprint":{"sha1":"97:DB:36:57:54:30:2A:79:6F:C3:B8:2A:F0:DC:B6:D8:0A:F6:C5:7E","sha256":"B3:C5:D1:C8:8E:E6:69:DA:E9:CD:9E:16:3B:32:16:5D:EE:BF:0F:0F:80:4E:CE:58:6E:50:03:B4:06:D2:7F:87"}}},"request":{"raw":"GET /=US HTTP/1.1\r\nHost: www.mycurrency.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://admin.kraken-ni.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=9pnr75j6bqh5jt5injqui35m65; path=/; HttpOnly\n_csrf=8199f11771cbb0461a8f51ab50db39dc1777a66c62ab61fceb5ac3e8ea935c7ea%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22uLgcjKxIImoMONAe18vfzQ06_jIiGAjN%22%3B%7D; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnow-time: Friday, 27-Feb-2026 06:43:49 GMT\r\nx-host: www.mycurrency.net\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvYxcuyepbzEQBS4nYRpVePpko0WSHRLM68gOY4ondRSMgjlVWayMk5XKABv9bpSY2uZheTPoOWkz%2B5tNpXgV4Q0aU30VhkME0tk4cFMMsuuuQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d45b5c81da9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":104991,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (487), with CRLF, LF line terminators","md5":"70cbed010a67598f64ce467f67bdce93","sha1":"968a5d18b4e149832d5a3947b6a3d38f5d3f6f78","sha256":"16edbcc834f2f68a352bac3c1aa664fecb3b7d453825debb72a96826cd5f2451","sha512":"f2a030f1fab4eb0f69cc7795593178c2179fdebf08b36c816ab8c7caf0302310e5a598efa622daf126280aaa201a4d18543fe911f1e04992898ca8752ada6029","ssdeep":"768:jV6l/NcGxP9ZH2ROS7JtKtVrRoplJxfNgfk:j4l/NcGxWROatKtVrRoqfk","tlshash":"e8a31f00e5cd0d3a887a85d359643b68319fb9fcef924c60f1bf5b32a2da8927405d57","first_seen":"2026-02-27T06:44:11.694692Z","last_seen":"2026-02-27T06:44:11.694692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":106,"dns":79,"connect":1,"send":0,"wait":580,"receive":36,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/QTUM.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/QTUM.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-e28\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"c30de543720319d8431ad23e15d81fc2","sha1":"87d6dabbda3a646c48796b3d68fa947c6a622f70","sha256":"26c18a592209c79c286f27c1f02b9e8fdf467a90c542476003dc3be65c3da549","sha512":"c75bde2190433a036a6f461f8b808983b58a8b48393d0082b314c74d383dbefc4157b86148f7d4225be8293e26d40db45e1bb336cd0fb57ad92cef4d856e4099","ssdeep":"","tlshash":"42714cd28ab552fd8719837e3319ed21f4f0e3c589370193498b9cbe189ba0309c46bc","first_seen":"2026-02-27T05:48:40.114848Z","last_seen":"2026-02-27T06:44:11.695561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-index-index.1478a5bd.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:48.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/pages-index-index.1478a5bd.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-76e34\"\r\nexpires: Fri, 27 Feb 2026 18:43:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65356), with no line terminators","md5":"99f18240f659cc6f2b7402a68cfe8e5e","sha1":"3ac3287f2cc8e950390e77344f6193380be28a7e","sha256":"ab8f385b1d311552907403b0af16000ecf67bdba20154fa9141f3868539b4a9f","sha512":"075ff2707a678f973130d90621e884def3230ae2ee82063d22588c668990613179409324a8af1d815bde49abe009309e7e6f53f7410defebe6545eaacb620fbb","ssdeep":"6144:Fe4wbg8VIeosToWAsI8xo64qA8HAegogM1gK4GYsr4V8LcCccicpU6e0mcfUiIU/:E45lRj4CK","tlshash":"8aa4eed2f6c82118857bcb02e546b6fc9e3aba639315a8c2e981bf345f175c73b2451c","first_seen":"2026-02-27T05:48:40.124815Z","last_seen":"2026-02-27T06:44:11.696098Z","times_seen":2,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/nav/7.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/nav/7.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-592\"\r\nexpires: Sun, 29 Mar 2026 06:43:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"ed755c9d1a8d98d1d4520b999cdab42f","sha1":"324bb5e091fe6913b4e75314d7a9580b4d069742","sha256":"bb295644b6c501c3165f2d9366a5773cb5992817e3d58a21c6390c4d930494dc","sha512":"5a12eeaf4e6dd9b72cdd33979c8afddbea40247cef8375b5f8900155f5bd8c9834b018076fef10fb3fcc9978bfae17892813d12de1eb21ac680099bae3e48fb6","ssdeep":"","tlshash":"3021e97fd46de06d7909c01386aab4a2041da0b46c613cdcdd6e0194445e8377065546","first_seen":"2026-02-27T05:48:40.133283Z","last_seen":"2026-02-27T06:44:11.696602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/img/ljl.gif","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/img/ljl.gif HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6InBpbEhQXC9YaTdMTUluKzQrRGlcL1U2Zz09IiwidmFsdWUiOiJTcUhPT25JeFZkb3JJcTQ2b3M5Wmc5WTFDdnAwWUVIMmU0b1NFUXBneDdFam8yY0p2ZVpDNWtTaEluc0VGV1pYU042WEJVeWJFaWtmWE1jQnJDWk9vVGZiQ045NjJjekZOS0ZuK0x3VTVTU2dQMDBjQk1uZEV0alNRblZKRk91dSIsIm1hYyI6IjhjNjMyOGI1NDhkNTA2ZTYxMzA3OTVjMWQ2ZTA2YWE0NDQ5ZTc2MDI5ZmVhYzc2ZDU4ZjYxYzhiYTIwZGNiMjkifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-30dfa\"\r\nexpires: Sun, 29 Mar 2026 06:43:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200186,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 280 x 280","md5":"2d8170b77a0ac72d0b496d3d79e52e29","sha1":"e2511a50ccf392931b5ef6cf5c6c261da82614c9","sha256":"67d1b5c342d43814875d3272e36ca67ce81fbcad7692200b8f1a7c66442e8fdc","sha512":"56325526d68b5d4eeb06c43df68aef0fafa33fd18a32e939a12d828ee7b3e85e8f06a269ee6484a81fdb4b5eba5210ddc54e0e33e48591e9e410ca4a00b45f19","ssdeep":"6144:wiWK8o/Nj+VUmocN+VU/2bIy56lkz+gcocN+VU/C/o8/WrS:wpuNqUmoc4U/2bIa6lkz+9oc4U/MPgS","tlshash":"e614e17bda3edfa5f70ea0313b50aa116cd0299e58e5f7375910bbd125822ac28dcdc1","first_seen":"2024-05-14T10:06:41Z","last_seen":"2026-07-01T05:09:09.370755Z","times_seen":61,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":899,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/ETC.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/ETC.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-a29\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2bc2b90b38d06e2f3d8b2a31c9832b0a","sha1":"9c22ccbc4359adc81a2640978148ed04c65affee","sha256":"7ca35148abd824c962d08d58f6b0bf258126939f5dbb5e8965dee6b592d7c18f","sha512":"4b96f60a72fc997ff396084c8e0d9a797ed931be89dd0f974fe39235b067e3ddf5be97dd09be0126fc037c8618c70d347b9afc9b12af1054c7d993dddbedd2cb","ssdeep":"","tlshash":"c4513a6688e69395ace6003f326e2d047865c3e4d8e9ba32038dc871db4923357784d2","first_seen":"2026-02-27T05:48:40.118142Z","last_seen":"2026-02-27T06:44:11.697654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/nav/2.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/nav/2.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 825\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-339\"\r\nexpires: Sun, 29 Mar 2026 06:43:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"6798caa4671c2e242bb19bc8e712a0a7","sha1":"839b05d9bad8593dd8ff5bf3322d2bd18ea057f3","sha256":"0f7c03685769070b2815f57b3d8c41f174989b1608eb6effcf2ce811b9a71379","sha512":"69d91eaee70a111056d4e03887b4dc6a1f4dcc4dcacc1a259630fc5b7ef39394105a33e0cab3ec5a1fc2f531a78146946178c6db516b461741d29b9071e0edca","ssdeep":"","tlshash":"ed0152a5f71894ec7138e2592c96c184295704651858cb28cd2114fc5baaa8e9845d16","first_seen":"2026-02-27T05:48:40.130051Z","last_seen":"2026-02-27T06:44:11.698238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/nav/5.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/nav/5.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 690\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-2b2\"\r\nexpires: Sun, 29 Mar 2026 06:43:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"0d3afc0b91da0d3e86056ca345bc9742","sha1":"9bf3b036a4043714d74449b4c8f0b713191a08de","sha256":"4b8bbe546be864b9fbcc1691bf328e7db8101973fe3a44618e87bad455b6a322","sha512":"79495bb814ee4a105d2db03585044a4539b7036f68eb4eff9317b6ebf4437031c21af500cfcdd2564c2e189ebc516810a51a1866055ff9979635d1f291e56b14","ssdeep":"","tlshash":"1f0183ef7a2a880accef00e2c6c0d85c423d126d424e8c5477324d24b773e4c49a7ba3","first_seen":"2026-02-27T05:48:40.079454Z","last_seen":"2026-02-27T06:44:11.699164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/getSiteConfig?lang=zh","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /api/getSiteConfig?lang=zh HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D; expires=Fri, 27-Feb-2026 08:43:49 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f27cabb28c601673164d789d1bc76d7a","sha1":"df68d1ae8d5eb943a0ed1374e26954ec408430f5","sha256":"3313d7b8f8aea711d69e9c4271753184081b5e63fa488dc04e2149f96492c0c2","sha512":"1d19f8ed044834a168e1a60187b8fb76c139f1e41bc82a2199331735097b470275fd316b93c4cf5a954c5b2668952d4e5efe4f88bd60065ec1b2bd6d2fa27df9","ssdeep":"","tlshash":"12b0126c41ddd81b218d23ccdac4980864d721d3502b0c4f43c2fc9c42ba3e4609d50f","first_seen":"2026-02-27T05:48:40.126505Z","last_seen":"2026-02-27T06:44:11.699845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1026,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/news/list","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://admin.kraken-ni.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=zh"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:48 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6InBpbEhQXC9YaTdMTUluKzQrRGlcL1U2Zz09IiwidmFsdWUiOiJTcUhPT25JeFZkb3JJcTQ2b3M5Wmc5WTFDdnAwWUVIMmU0b1NFUXBneDdFam8yY0p2ZVpDNWtTaEluc0VGV1pYU042WEJVeWJFaWtmWE1jQnJDWk9vVGZiQ045NjJjekZOS0ZuK0x3VTVTU2dQMDBjQk1uZEV0alNRblZKRk91dSIsIm1hYyI6IjhjNjMyOGI1NDhkNTA2ZTYxMzA3OTVjMWQ2ZTA2YWE0NDQ5ZTc2MDI5ZmVhYzc2ZDU4ZjYxYzhiYTIwZGNiMjkifQ%3D%3D; expires=Fri, 27-Feb-2026 08:43:50 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"00b3e421d31e11ad8d21dc128f3b3f7b","sha1":"1bd5619fdf5f7428e386116f8a5b22c36d47b84f","sha256":"54fab62aa742a781aad6bb279f8f1da58ed6a973168df187ad8974a562ff9ac4","sha512":"3b049b722b61848600ce40f12f2794320f2a961b83efece3bfb4b32072580282e6c0ddb4510fecdba98ac7f2c5aaf8e7546c8765fd60c35fbf9427e914a407f0","ssdeep":"","tlshash":"2ee0c0eab744acfb8bd613c16c0f75d5c6df3151c640074d09f4999dc31c098542b82b","first_seen":"2026-02-27T05:48:40.090617Z","last_seen":"2026-02-27T06:44:11.688555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/BTC.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/BTC.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-9cd\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"9f3af23a4e901ab6d7bd615260a6d37d","sha1":"09e0fe306e357753b58afb0208337f5c447c15fb","sha256":"531cbcf9c9b7c00adb3c7db0da1ff3a71bc6e787a58df411eb4034bb512e5fe4","sha512":"00b79202bf35f912433de542bddb6d34b4bdcd33263e20a31339e70402b557388f2783558a98109dc9a46c26e7d6faebb607ccf4a4a93c223639d1151901d9e0","ssdeep":"","tlshash":"79512ccce069883ab3fe0839517596d242f722f5a351ee9c0d5c99c6cac147c4629df7","first_seen":"2026-02-27T05:48:40.150532Z","last_seen":"2026-02-27T06:44:11.700478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/XRP.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/XRP.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-44d\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"e1b715f4c119cc1f986b982bd5231e58","sha1":"9d50c9cc3bd06ef441a27699cfca1010cc5c957e","sha256":"c51deed46326d1ac556158181f477df574a2c43ba752deffe3890bbbcc7607dc","sha512":"3dd445b96246ad2a4169250e1d5e71df42f49370d84e40a49862f4948d5cad5a49ea27b1edae700d465c7d36a9ead6d039d1167ce008b908f7b8d637cda20365","ssdeep":"","tlshash":"e311b6c28235c7842ac9f1013745e6dad90b5aa81191922d6269f3ae0a334cc2d633d7","first_seen":"2026-02-27T05:48:40.134894Z","last_seen":"2026-02-27T06:44:11.701041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/ELA.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/ELA.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-49e\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"eb22202a6b32b07f0876b15632ed7009","sha1":"3dbed998b457d877523d41ba498aa331f3a71dc9","sha256":"f0e3a5846629edd0620c34471c62691479d94c45534c9c0e1758c4ab9c8b0e6a","sha512":"3987b09c3553eafb41cefa715362c427e383bd617f6e0259cf08930a3ac69a1a580efe5c440503fd15df35f4e58d49e0d9040fde44855629774cba866d306cb3","ssdeep":"","tlshash":"5021aa13433f9f94ed7f6a727f1d50fe655f04866d031552ea37843996512c553a8240","first_seen":"2026-02-27T05:48:40.137816Z","last_seen":"2026-02-27T06:44:11.701596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/ETH.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/ETH.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-9f1\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"775c350b2ebae386c91d9f89125454fb","sha1":"006da6c0be4955a6d22b70098a8d88a14ae7fc51","sha256":"83133cda464e2171974268991da46b539d8443901d29b02a912da55e0d52525f","sha512":"3b53a6a899c7d4f2478446108a506843d4972edf9450cadba5d9619eea75f9ff833d48af4bdd6dbba28b4532a644e7c43d585c64312acbe9b8b6ebbbfe4d5a83","ssdeep":"","tlshash":"f9511a83c4d869dcd0d0d170892ebf317dc21ffdd452b59d7905202e9eaa17e9b94a28","first_seen":"2026-02-27T05:48:40.14366Z","last_seen":"2026-02-27T06:44:11.702239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/index.css","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:46.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/index.css HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-1794e\"\r\nexpires: Fri, 27 Feb 2026 18:43:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-07-28T01:33:23.811028Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/chunk-vendors.caa5b6f9.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:46.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/chunk-vendors.caa5b6f9.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-a96d5\"\r\nexpires: Fri, 27 Feb 2026 18:43:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":693973,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"2c8c4f6d155a68bfe434e4fecf00b57e","sha1":"c32ad2d3036bbbdffb64247ef43169ce9fc5b74d","sha256":"4f696a116e4c0565948ad2423dd20aa3af0c4a1635fa50d6c32edae7bb6c5c5c","sha512":"2ca0ff3dfe3e93bcb97eed851d03f3fe0bcfafbf25b964a6105eb822fa8e560dc2e195fdc2a28d7dc76155c68f699beaf16eacb96b8956a6081f62344c2e8b0e","ssdeep":"6144:Xckq/hCGADizri/aBPXZAheJX5SLVr8ZydLp2zp7Y4sq5T3r8P:FqA2zO/AWBIZiL2Fp3r+","tlshash":"ace4f79cb281b0b607e761f5003f220ba13b6968b40ad4d5f279e5d4ad78d8e6127f7c","first_seen":"2026-02-27T05:48:40.120247Z","last_seen":"2026-02-27T06:44:11.703255Z","times_seen":2,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-fund-assets~pages-fund-fundTransfer~pages-fund-transfer~pages-index-index~pages-market-market~~a6b530f5.cbb86a36.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:48.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/pages-fund-assets~pages-fund-fundTransfer~pages-fund-transfer~pages-index-index~pages-market-market~~a6b530f5.cbb86a36.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-12b3e\"\r\nexpires: Fri, 27 Feb 2026 18:43:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76606,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65358), with no line terminators","md5":"89fbfd93f8ff5a8286bcc993f84a8268","sha1":"1e87c8953f4c305b8cfe147b7bf6d283984ed2cc","sha256":"2e3930ed3ee7bba46d84443726263402d91ddb0a4915356d874f283822e6f9ac","sha512":"90abc9a4a969999fd494f0f9b1711edd6b237504df0ce4f0706267eb604db9e0b78403501de5ac0bec6d328ed6bf45b8773c319502e01b38f80da1d813664e9a","ssdeep":"384:3vQP7IcuNi2U4AvIzyHW06QX69OzwYeWBZ1fIft/RHVBgS1aGJoy0EVFcPl0UjJ:MMdUtIf7aGSy0YFcPl0Ud","tlshash":"d473cbc2f5d8301e47a7c745f7412afd5b2aab239201d9d2dcc3ab244e165ee6f2492c","first_seen":"2026-02-27T05:48:40.092828Z","last_seen":"2026-02-27T06:44:11.703898Z","times_seen":2,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/IOTA.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/IOTA.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-740\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"825e8dcd53eabaebbac06066d621494d","sha1":"d446facdbf1f00850d414e6fefdff7726be890e8","sha256":"bd6bf3efb303e619d2d140976b1da63fd628e3f4c93e7f0334a24929bf948034","sha512":"d4b831d9afb4c845cc7ee6403db8b12076f5f69796d3dffd2af8cbe8fe677959421981bf1d7aef08279791563336a98914c8024165c793abb0e34063237d9753","ssdeep":"","tlshash":"1931d98e37a022f12d498106cae352787462c79a593d1f520319dd61ee2755a4642e5e","first_seen":"2026-02-27T05:48:40.155519Z","last_seen":"2026-02-27T06:44:11.704398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/currency/quotation_new?lang=zh","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /api/currency/quotation_new?lang=zh HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D; expires=Fri, 27-Feb-2026 08:43:50 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19451,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6044280af0fb24b9954cb2888e06c357","sha1":"3e7cd7a28c26d634442ab9c9b549f8374fdb4e96","sha256":"7c8e62a658b0608acbf14e3169258643ead540dd54f3547c1e4d6977a0465e7e","sha512":"c616137d0593e6cb0aea9d8ef9bcd0272e6f91f5ca96db9e19396bc1e4f4a5ddad3d05d0f872bb633fa998fde8ff6c2204a5aa132ab538f8bfd23e4dc8fddd4d","ssdeep":"192:11V2pZRVe/pUZassSwz4rJbpmcmo+7mSNYLw3cSXkpVrv0op9+jESQp5ZoPQApmX:lNRkJuuYvpS1sCF2J3gt/igBHW2Z","tlshash":"4b92e15d612d8a78c3b79ec2dede32ad3590b507aec28fc5d7dc9f884284567e20b502","first_seen":"2026-02-27T06:44:11.704999Z","last_seen":"2026-02-27T06:44:11.704999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/lh/deposit/config?lang=zh","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /api/lh/deposit/config?lang=zh HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":997,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b7c418bcdb3f7ce95acf2f8fe8d69c36","sha1":"b551ff4a2db3f4d61ef3f9a57c4a3eef1bfaae1e","sha256":"2b67e441db9eebcd3af3ba80a7a3b5ea9c8d4a8afbefa16df164092d72bae6c6","sha512":"c10ba1481ed81558bc7f13533fa219bb4f7b07bb01fd0bc6392e07ef2dd015b993a740cd3749ca0096bf171649d72d3da8dfe5b84f03b85491381d309358fc22","ssdeep":"","tlshash":"0f11e72d625d8af4c5391a8353d6b4aca05a374e3ec70ec833ddad6c83d5526d119e32","first_seen":"2026-02-27T05:48:40.103757Z","last_seen":"2026-02-27T06:44:11.70612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/BCH.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/BCH.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-a49\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"54229c3cd264f55aaee74508da0eae3d","sha1":"3ecfe1a7dfde469c43b1d17d2fc8648ce6c19281","sha256":"31e0dd35aa72688cb54ab9e8927fefcbc346580ff26098fa9f0c23fc1851b1f9","sha512":"442269687a1dcdf27d1ba9d229e713c257eb1f3650b8c1b6beb4dc3d415d178be9ce2ba7f03952fb5a9ed43370d2a0b171831ea4840d8d4ae07da0de020093ff","ssdeep":"","tlshash":"4b513b31244896d8e716667c50ca4320a8b8cbda13c2958d26d61b2fca54d7c00707fb","first_seen":"2026-02-27T05:48:40.11279Z","last_seen":"2026-02-27T06:44:11.706684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/index.c5cc223a.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:46.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/index.c5cc223a.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-d1585\"\r\nexpires: Fri, 27 Feb 2026 18:43:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":857477,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64770), with no line terminators","md5":"e3e948e1506bb5d39c3b60ae56f04953","sha1":"0e41ba03ed4e4e72824c27cdc8bf296e815fa51e","sha256":"22fdb43bad85eceb1238306687f6c85a69331ea1a858e9677a523e4ef276c0bd","sha512":"42c0d436abe0125f9b284c82e44c86eea7d46fbe539f89d1d7763be02fdc34c0c2ec309a5b3034b143e1e238138f58637f89b4e6a217ff25cbd14930e57578ce","ssdeep":"24576:vb2SGsaOZdwG1ZAIkKDJ3bys5XrHeg05T5jeq:vaDxeq","tlshash":"70055a87b0c1616812d71601a09f72a8537edd256547b8e9f3c8ba54cbd73ce6322b3b","first_seen":"2026-02-27T05:48:40.087385Z","last_seen":"2026-02-27T06:44:11.70725Z","times_seen":2,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~f86d5057.9c49241c.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:48.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~f86d5057.9c49241c.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-1e48e\"\r\nexpires: Fri, 27 Feb 2026 18:43:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65272), with no line terminators","md5":"e51005850bfeefdad9ebf35f3df66bce","sha1":"bbf8ff8c4f1d08c75e836bee07c363cc17a60c93","sha256":"d8ca790dd7b59499991f7b6ccc6ff5af404d4b58b44a42417a7de33e8848157b","sha512":"adf7cb8540a7b8494e119b5814d521163766680c77e448910287349f3dbbefcc294edb04420b7773415a066a964ece864e25c35e588adb525dda061cbbbb99d6","ssdeep":"768:D7gQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wX5d0tCAWNjZh/tpptzR:fsYId0FHoMqu7NdEAaM2OJuAnuarDibW","tlshash":"d2c3abd2f6c82844566fcf4e9341b3fcbbbaba2342697863e4622f244f772d6250455c","first_seen":"2026-02-27T05:48:40.0757Z","last_seen":"2026-02-27T06:44:11.707996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/iconfont/iconfont.woff2","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/iconfont/iconfont.woff2 HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32744\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-7fe8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32744, version 1.0","md5":"5b8f35b173333c5161098c675e902401","sha1":"c33837d28eff55458d49ef00e68ae9a04da46f05","sha256":"912327f77b1b2d3092e0cda25efdd0c5045ef17d018864d1cefba33db7727fce","sha512":"38a8b9a82c69376f1664e4e76f31605a6ad31e611e2f282c46a40044624072a48ed8f9fd49735136afbd21ba61cc9ac9795828e6fcb33ad4b662bd41cf6b4084","ssdeep":"768:9P1NcXcebJOUlU8WQKAfiDvCcj+IWL3OJ:9dNcXceNOUSD3AfmCcfJ","tlshash":"cee2f1303175ab40c3e6ef396e7b1c46d8724a3892785ee1e3d16e4d142bccd19d5a2b","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.089646Z","times_seen":440,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/TRUMP.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:52.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/TRUMP.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-2219\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"20ca569ba43c8ca1bd175f66fdc7ea36","sha1":"5a5ed63a7144cecf65dd55f9364ef184d1c70747","sha256":"2870f7aa12061c99050ea30763b27eb547b6b2583f4b66fcf2527f3442ae2072","sha512":"b7e4b075588b492e1b92bebc03497411180518481d3dca8c5948f202fe1ca4bc4f9db5d63ec4ddea7f0e55d724b1cca5600d12e73673cddf055d22b6a84ff9a3","ssdeep":"192:6ShIknEsCrOqrfR/hSrfYdtno4a7R0oldI8Ku:15nEsCSqrfVhSrfYdO4a7","tlshash":"92028ea0dc006d5087ddbe89beee624597778a9144d8e19b65de4c000c715fdce4a3e7","first_seen":"2025-10-27T04:13:30.15001Z","last_seen":"2026-06-27T09:50:17.725778Z","times_seen":21,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/DOGE.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:52.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/DOGE.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-154b\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"11875d300aa0eb5a07bb2ced8b47eaaf","sha1":"97838e71b45b5eec0b6b5c8b87cc0cc8174ec498","sha256":"86970a4835ad0d24aaf3b97398952710b326c9e5a53551e6c99a6518d288649a","sha512":"d1b2673b40c7051e67f8da91f1a08bc4c7fb65d91fc5b6061ad8a82037d7f7db2785ff3cfde9723cbae38cdba9aaf629fbfb7381aac8ca49e94a35576897d325","ssdeep":"96:+qG6rivBaF1LhPssygWu73UhkeR2RTCMQYX4e5rrFvIE/XBQJBzcLWiMzR:+qbricFd5Tj7AhkesRL34arpv3/x8BsA","tlshash":"d0b18dab170cac70990c8e22faf3ad78d52122926ef154f154bdc4d0aff5f94d660662","first_seen":"2026-02-27T05:48:40.14075Z","last_seen":"2026-02-27T06:44:11.710026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/USDC.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:52.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/USDC.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-d4e\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"114214cbc5d8237260b22f952aa84d8c","sha1":"939e6e46f2ffc3ec399297269b61908e4f4953c8","sha256":"de067035ba98387ad84cc2380db547f8d5f3701fad0683e2e8fa23196bb84cbb","sha512":"60c1a72dcd027cd2277e2e007283fc5c982e1ecc0987345cc7a6119ff734da29a65055cdaf65ca284dec2a7aa45a77778ba4854cf76396ca2b57e5c462fdd0c4","ssdeep":"","tlshash":"8f616ee7a25a48828b489d09a47d0466c1d725392b478f198b0ded32a1d2d08b3d3a15","first_seen":"2026-02-27T05:48:40.10205Z","last_seen":"2026-02-27T06:44:11.710651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/news/list","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://admin.kraken-ni.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=zh"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6Ik1nOVN6ZGVYRENrTXI2VjZMNVloNFE9PSIsInZhbHVlIjoiQWdad0NVN21CMEJiZW0xaUs3VldVTmc0QjBUWjFGSXh3RCtiSnBRTm9kUko4Uk1XTWVSR1JwWE1COUFkdEJWOWhkN1l1bUo0eGpRbml5V3M0MjkrYUxMUWpmaTRyNlhuTEI1Y2Jpd2xCRDMyaTVWSit3WkxJWHVTNGpGeUhDSG8iLCJtYWMiOiJlNDZjY2RkODc5ZjYzYTA3YThiYjY1MWI0ZDUyZDNiNWMyMDdmNTlmZDA5MzM1YzAzZDRmYzJhYjY4MGQ0MWFkIn0%3D; expires=Fri, 27-Feb-2026 08:43:50 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":431,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"164b3c54fd5ea49874736ac5afb58142","sha1":"b68703e1ee34163d7eb8670992b8a75945267f97","sha256":"8b12a738e6b014d7bf8186b3c43bbedb3f7dceaa587d439aee02cbc339fa1090","sha512":"3af8644852d3d39a997a31fd9506df3a722234cc194b1fed07b23aca9ed3ed3821a6e42e96f33bf4f816a7ecb012229983f9f63a61586aa61a5143950574e512","ssdeep":"","tlshash":"d3e02bae9d80c8bbd1446382a407f05493cd61d28f45070d5fc18cd8cabc6864423883","first_seen":"2026-02-27T05:48:40.131773Z","last_seen":"2026-02-27T06:44:11.693669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/nav/9.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/nav/9.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-5a2\"\r\nexpires: Sun, 29 Mar 2026 06:43:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"3b59dc9be7f6981b87bfa6c82b2464e5","sha1":"da03baffb157104d3879d0959dc5525f52df6a0f","sha256":"e6664ff8c56f49e32bc11fb25ddead18cbe2502262f7c72706b3e922e22c31d0","sha512":"7f063b8536faa484d00d27b89b26cce24343253fea44b5eedf81540e4a12ef7f580964a28d8681d3c1fa45aa160cddc8b67e1fea2ae2076cd9ccbca95fa80db1","ssdeep":"","tlshash":"9621e9ae47fe4d284e1731498bc12181ee7c981d74644c0814497ef3a36f50b5085f0b","first_seen":"2026-02-27T05:48:40.105434Z","last_seen":"2026-02-27T06:44:11.711288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/api/news/index_pop?lang=zh","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /api/news/index_pop?lang=zh HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6Ijkyb0YrV2JTSnRiU0lvQ3hBT25kY2c9PSIsInZhbHVlIjoiRHZDcFMxOEd1SlhFNHpmSUwxUHNVXC92TWU0OVpPeDFmOXZKdnJvcERYeFdPT2gxM0NKSU5WU1wvNHRPbm5mUTdVTjFKNHNGcFB2UUdkTGZad3E1Y09zRUtwM3dGUWxDakoybkI5MFlcL0s2eldMUm5SUDRjRStyTHVlckxFejJlUTAiLCJtYWMiOiJlMmQwMGZkNDFiNjU0YmU0YzY5YzE5NzhkYzNlMzNhNGIzMThkMjQxY2E5Zjk3NDkxNDU0OTgwNzdhMDlmNGFlIn0%3D; expires=Fri, 27-Feb-2026 08:43:50 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7e6fa1bf5cc93ff191f6e9d25a7b5587","sha1":"027ba2ef0614fec58e260e7a0c989c283527b30b","sha256":"4fda09bb7c83ec6f6948f56849c4f7cb727c29cdeb0b42b84bec891be728a963","sha512":"4953f0c097793c2f756ea0eb744cac4369bb3cabad68f180964c481216bd4b77a9c176b1c4c0c81caf6df74bf5c8bb91f14c7b3aa4caee30131c6811ca9a5e0d","ssdeep":"","tlshash":"4b800000a208ac28030a0a0238883800828e0083c0822a0208088e28838e8b0223232e","first_seen":"2023-11-01T08:36:58Z","last_seen":"2026-07-27T14:50:18.128937Z","times_seen":289,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/img/maibi.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/img/maibi.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-18e7\"\r\nexpires: Sun, 29 Mar 2026 06:43:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"16de6b987c6c63cb86c0913621b78496","sha1":"48f04022d4457ff74a8dd7c55b15ed36aba6668e","sha256":"7bb81d9fda572f0cf087d3e64ba8702437b88a13e60aaf3e6f5d2b670e532834","sha512":"e30b9a1bff452015de924012e9dbc7be17da7a73592423cc3a5402a7dbc1f0c06626b2a5f8104c5e133cf14805b9e40a41386ebedfe4d8d26b1fa9dd8030fe31","ssdeep":"192:UWqpp58bhvwExrmkW56Bc3CYvfBBbjUty3kkT:xejShvw2lBcnfDjU47T","tlshash":"86d19eab9db5623ecad05ba7d003440e9f2317802c6e315e6262581bce4ae615aa63cd","first_seen":"2026-02-27T05:48:40.110488Z","last_seen":"2026-02-27T06:44:11.71269Z","times_seen":2,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/img/homect.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/img/homect.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-165c9\"\r\nexpires: Sun, 29 Mar 2026 06:43:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 764 x 136, 8-bit/color RGBA, non-interlaced","md5":"e86838267b80e1df4ccea6a214fa47a1","sha1":"3b41da41fc4b3839dbe969efc418f4b84adb8a3a","sha256":"cce7b5c8868c90b004511a3fcc11668c8a6287c92bf05177d726a07144e18e80","sha512":"b27b4e76b5362a5abe911d01b16556cf60437ebfc357a3b9697d9cd9e48835d040adc4bc27aa935955a5f2e71f7ea3928e68b699e940770c971eeca261828d66","ssdeep":"1536:KD0m1KxXzGqtxOUuXucMDH8T22aHQFzaEYfQ+EZ/Zy9IVbnBr7fxaCqP6sycZMBI:KDVKxCqtcUuXi78TxFwvixyqx7NqiRK","tlshash":"0c9312ef9196a324885f338415446be1d16321fa532ef988edf8ec0b7187bb56f3015a","first_seen":"2026-02-27T05:48:40.147405Z","last_seen":"2026-02-27T06:44:11.713476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~74463de0.67996e87.js","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:48.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~74463de0.67996e87.js HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-1267f\"\r\nexpires: Fri, 27 Feb 2026 18:43:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75391,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65358), with no line terminators","md5":"b1a4fabae66fad81218fde9d7f0a9456","sha1":"4627ba9bc7665b7dcbb660d03d60c06577d1d2ec","sha256":"2a1429d09aa4905bb0b0c203e057533d61e1750c9ee528ad7eb94553529d6ac0","sha512":"00baf33ab867ec9cb8113995e6b8231c47a7c21bf3cf960ecd50b494cb23de9a01c942b3bf54cbc6666217a32c2781be21b368063b35b7bcbab68a67ad6302b9","ssdeep":"384:WeIhI8eMCPMpbF+iS9lV3LaJOTyTxLTCwW6FfbIRkke+NbIE2LG3VB/8D2:ZFMNFfiIEwG3T/8i","tlshash":"1c73eab2ffe82004d527c789d74332fcd9abb72b0a016ad6d8416b345e169c7358b62d","first_seen":"2026-02-27T05:48:40.100141Z","last_seen":"2026-02-27T06:44:11.714038Z","times_seen":2,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/icon/favicon.ico","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:50.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/icon/favicon.ico HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkNuMjlUWVJ1N1wvb1d5dGU4YklVNWRBPT0iLCJ2YWx1ZSI6IjMzOUpobHZLOFpLN0xSZFwvSlpYcDNiK3pYZUkyN2xtQ3RMQmtYa1RxSCtEckU4cjJtREIwanE2SGN4Q3dGQnkwcmQ1MDN1dmVLemFOa25EQVM4YkUxTjloQUdhYmNpZTJuNFNERWZlZHFiK2lRMUNPSWk2U2tjNVFlUW90WWNuViIsIm1hYyI6ImFkZmI5MDlhNDY4YTdlYmJmZGI4YTc3YTFiZjRlOWFmODA0NjdhYzVlMGNhOGFmYmVkNjEzNDJkMGFiMDk2ZWMifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:48 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1468\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-5bc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64 with PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced, 24 bits/pixel","md5":"47074a7f6be35c50d633488952230b59","sha1":"45ab9182de01430346d07555a923e4d632c59e3f","sha256":"4358055c04a2e9edf75d00ec1c6815a2c99ba74dbaf0dbb9b2c5c3f716df1dbb","sha512":"2749e122f2f75aac7636a5d4fdde798342140e4a1f09b3d35e82810691a4fe8492dc5bd418c36486b458b89a340b93203f3608ec5310938f97d83d6f9f354948","ssdeep":"","tlshash":"9831e6a76b1648eac2382418c4325906ca8f7cdb4b5d24c23de63f208c6b7c0275df36","first_seen":"2023-05-13T12:43:41Z","last_seen":"2026-07-27T14:50:18.092921Z","times_seen":426,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/image/svg/LTC.png","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:51.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/image/svg/LTC.png HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nCookie: angela_session=eyJpdiI6IkJMTDZuczI5R3dWdm9OS25RaFFqQ1E9PSIsInZhbHVlIjoiK0M5ZHhHbUNXYlF4XC9ObUhudzVraUhBMzdcLzA5bXZNa2tmaGdyaVwvSmtNOXc2XC93eDRjWnFJMGd6YmQrNnZ3SEpPOXlRSzBRXC9ZN1FcLzBCc2lzSVlnK3U2aTBFdlFRcm4xdTVPR3BWd0FjdTRmOGJHc05HNDJGZUpFUEJVNm50dHUiLCJtYWMiOiI1NTE3NTRlYTVkYmIwYWI1NGNjM2IzZTQyZDJmODYxNWY5MjU1MjI0YmU0Zjc1Mzc2NThhY2FmNDM1ZGI2OGIwIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a10614-6db\"\r\nexpires: Sun, 29 Mar 2026 06:43:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"dc46936d5bf0d4a2867e6c41b372088f","sha1":"b5636d75ca0d796a7c5184695c463b0bdcc298d8","sha256":"687d70efceb06f28aa143b847abe023a157dba292c5cbfaf452cf31f9ffe66e5","sha512":"0962ffc7d2da8661bf7b35f7cc298d22b04e1e589832ea1653f86aaa9b46ba1727912069f8d3780a0bf552296d89b50aff9f5d77e3e67991af5cc51f15294cdd","ssdeep":"","tlshash":"33310b71ebd845bc1a4a16be56e23b001f190860cc91a7c9765dac55b60ecced91ad0c","first_seen":"2026-02-27T05:48:40.154282Z","last_seen":"2026-02-27T06:44:11.715298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T06:43:45.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 983\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-3d7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":983,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (442)","md5":"83e9569ffca9dc580b02122b10a2abd3","sha1":"6c4eacb7641fe9532880febc9295308381da2ba0","sha256":"c20163056da54dded61bc8cedf6cf7bd71500b3bd9e7533bc2d08d007a309b87","sha512":"3eb28ae0bea1f16d9804517064de999c0f1beac9b6606db082f152556b08d404371ba8c3e3fc1682b16de287985e5b3cc5fd413e0e226abbca5a91fd368f5455","ssdeep":"","tlshash":"ec111cd76c00d6181b31aa5d34baf35c84eb85a92c62e881b8cc1c9c4fd0fc84f38899","first_seen":"2026-02-27T05:48:40.152918Z","last_seen":"2026-02-27T06:44:11.716104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":481,"dns":49,"connect":212,"send":0,"wait":212,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.kraken-ni.vip/static/DIN-Regular.ttf","fqdn":"admin.kraken-ni.vip","domain":"kraken-ni.vip","tld":"vip"},"ip":{"addr":"103.43.191.29","port":443,"asn":139021,"as":"West263 International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin.kraken-ni.vip/","date":"2026-02-27T06:43:49.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.kraken-ni.vip","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 27 Feb 2026 01:00:00 GMT","end":"Thu, 28 May 2026 00:59:59 GMT"},"fingerprint":{"sha1":"68:88:B4:B5:E9:26:07:8C:37:C4:30:C5:A5:3B:3D:54:D1:57:84:C0","sha256":"B5:B3:FC:35:71:00:A3:5D:92:75:B7:AF:0B:D0:05:77:27:87:76:4E:01:A1:28:14:53:BD:FD:14:B6:C9:4A:FF"}}},"request":{"raw":"GET /static/DIN-Regular.ttf HTTP/1.1\r\nHost: admin.kraken-ni.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.kraken-ni.vip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 06:43:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24676\r\nlast-modified: Fri, 27 Feb 2026 02:48:52 GMT\r\netag: \"69a10614-6064\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-07-27T14:50:18.132951Z","times_seen":540,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1034,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin.kraken-ni.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}