{"report_id":"509c0c74-18fb-471c-bd5d-756072f49bdc","version":6,"status":"done","tags":[],"date":"2026-03-13T15:55:21Z","url":{"schema":"https","addr":"kraken14.co.at","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"ip":{"addr":"104.21.50.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kraken14.co.at/","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"title":"KRA46 AT | KRA46 CC поиск сокровищ в Петербурге. slon4.at, slon4.cc","dom":{"size":22296,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15294)","md5":"930b8a3d154ee81c95145ee63bd266c2","sha1":"b97e3fba61771afff4069b7bec6d12686371bccb","sha256":"99eb99be9bbcfde2b141963f816eee1392a59d079577443661fcca80c4aaa58b","sha512":"d6dd399dc81caab901eb392d73de4ecfdf08554c063e32a4fb6e9d8412876010f0fe179f68fbb5cb10bcad341a1a814776af370a14eb7467555a9c8ce3442d2e","ssdeep":"384:grjr+nkREPZDw0O/nvpXqeceypX2Co8PBnJVKdMNtRnHcYbK7yZ2USBdFx:kMZavBTcPJ88PNJFnZKQ2TFx","tlshash":"38a2ae261a671d465243d8287e0abd467ded80bf5707c9b67e8c58e54fce0a4c2377c8","dom_hash":"domhash5238a8470d6297110a9eec13dd50b5f5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kraken14.co.at","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"ip":{"addr":"104.21.50.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T15:55:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"kraken14.co.at","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"kraken14.co.at","ip":{"addr":"104.21.50.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-05-30T01:49:40.219823Z","last_seen":"2025-05-30T01:49:40.219823Z","alert_count":3,"request_count":3,"received_data":25032,"sent_data":1425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kraken14.co.at/","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"ip":{"addr":"104.21.50.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"273a567817a222ea36919fed78ed00ab","sha1":"f06cf879535c926fcbfac6a0db31e6706f6ca8c9","sha256":"11704e45a48552b3c0b2401e267c18d07102c0519b68178b4a4560ef631fde1c","sha512":"95502cfd7842634e46346f85c7355dfddaeec1781591dfd4d3db8fd11dc63682f297e550ae952353dd5aa181d547b24165cbf023ddb4038a79d86c1be62c9681","ssdeep":"","tlshash":"2ee02076e352410399e1e0258d70658c603000db6c49f6bad0597451710defb747bdba","size":341,"data":"","first_seen":"2025-03-05T21:23:04.354995Z","last_seen":"2026-06-06T04:44:48.462876Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kraken14.co.at/","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"ip":{"addr":"104.21.50.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T15:54:59.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken14.co.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:51:38 GMT","end":"Wed, 06 May 2026 20:49:03 GMT"},"fingerprint":{"sha1":"9C:81:5E:8E:5D:D9:B2:99:20:07:53:3A:C4:63:EC:23:7C:03:B2:E5","sha256":"5C:98:C8:7B:C7:CB:4B:48:0A:22:C0:BE:17:A0:DC:D5:90:E5:B7:D7:11:05:38:62:C8:AB:53:5D:B7:38:6B:DB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken14.co.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 15:54:59 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: scheck=1;Path=/;HttpOnly;Secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ploZ2D9z9YigYpQS2R7yrVS0HXp1CErPVWfaTomurk2airs672umJHcYAX7uh7LcfzoVYXHr6UV4U2fB7shVD34w%2FQUMPfi9q3%2Bzo2vC\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dbc386bc906958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (507)","md5":"4713028481a00e5ec93d78d776dee7be","sha1":"0ee5d1dea2fe10ce03135d7d3224b771d1143e92","sha256":"6245e7eab3c77f2c9187518391c4af0f18627860912a2a0499e8f93d6ca4618e","sha512":"65b7d522b35b0e6130195d2bfb4a19ad8fdb149859d08f4699c457cf8258ae69d855d56d9e5b9e7f970e263d73b9f5a2d03d1c0968a9c67dae751846bb63738f","ssdeep":"96:iakrgPVFkrpMIZpob5aTiUf6n7JPKaHJoxQLUQfZTdyu7qFsejy:i7rEqrByNa2US1PKgpQuuFpjy","tlshash":"15e1a693556b04493107e438bf44be0a36ea80bb5b17d5213ecc2ade1fda6a4c1b778d","first_seen":"2026-03-13T15:55:22.136586Z","last_seen":"2026-03-13T15:55:22.136586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":71,"dns":40,"connect":8,"send":0,"wait":72,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"kraken14.co.at","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken14.co.at/captcha","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"ip":{"addr":"104.21.50.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kraken14.co.at/","date":"2026-03-13T15:55:00.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken14.co.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:51:38 GMT","end":"Wed, 06 May 2026 20:49:03 GMT"},"fingerprint":{"sha1":"9C:81:5E:8E:5D:D9:B2:99:20:07:53:3A:C4:63:EC:23:7C:03:B2:E5","sha256":"5C:98:C8:7B:C7:CB:4B:48:0A:22:C0:BE:17:A0:DC:D5:90:E5:B7:D7:11:05:38:62:C8:AB:53:5D:B7:38:6B:DB"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: kraken14.co.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kraken14.co.at/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: scheck=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 15:55:00 GMT\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2zlsC7Ip6Z%2FQ1Xki7rDsVmqN8fK1oVHL9JZzaQOec%2BHS5E%2Fn3UUxuekAlns%2FeJnZ1NEtGRkN2U2qZ%2FF8UVhJhVinOkiJMJ2S8%2FmbFlc\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-cache\r\nset-cookie: cookref=https%3A%2F%2Fkraken14.co.at%2F;Path=/;HttpOnly;Secure\nses=hcywKONEXaWQUbSC3o;Path=/;HttpOnly;Secure\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc386d49fa1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15216,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (15216), with no line terminators","md5":"a9a540bf66fe2b477fca0199b005e31e","sha1":"0969ee5b39d17edd2cd70db76ab1f2158a86e94c","sha256":"0ead2e6b0a1457a81a207a31c67b444deedd20c88b05aa380ccd376d4189db8a","sha512":"3c96e4ff21cd4cd34464c4ad46f29b344050b22cede941b59cfc3db6990121a6092e75f633dc177722acb23497ff8ffdcbd7674913d9029abcf3273ad3182e80","ssdeep":"384:dnkREPZDw0O/nvpXqeceypX2Co8PBnJVKdMNtRnHcYbK7yD:+MZavBTcPJ88PNJFnZKY","tlshash":"8462c02c2da36f67cbc70e0d300fa885cdac44ef969659f6d90dd8e1888d09987366d1","first_seen":"2026-03-13T15:55:22.137745Z","last_seen":"2026-03-13T15:55:22.137745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"kraken14.co.at","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken14.co.at/favicon.ico","fqdn":"kraken14.co.at","domain":"kraken14.co.at","tld":"co.at"},"ip":{"addr":"104.21.50.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken14.co.at/","date":"2026-03-13T15:55:00.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken14.co.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:51:38 GMT","end":"Wed, 06 May 2026 20:49:03 GMT"},"fingerprint":{"sha1":"9C:81:5E:8E:5D:D9:B2:99:20:07:53:3A:C4:63:EC:23:7C:03:B2:E5","sha256":"5C:98:C8:7B:C7:CB:4B:48:0A:22:C0:BE:17:A0:DC:D5:90:E5:B7:D7:11:05:38:62:C8:AB:53:5D:B7:38:6B:DB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kraken14.co.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken14.co.at/\r\nCookie: scheck=1; cookref=https%3A%2F%2Fkraken14.co.at%2F; ses=hcywKONEXaWQUbSC3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 15:55:00 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXNvV9I0g7nkKSwMUCb5lWgvB6018IHxvWaOJYQ28CRBBjggeG2TOwuOfqTstfxcZvrY6vJBVQN8T%2F2njU7oX2L7Qzw90mgUFgNJfnu4\"}]}\r\nlast-modified: Fri, 24 Oct 2025 14:51:09 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fb925d-256\"\r\ncf-ray: 9dbc386dda0e1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-07-25T03:02:44.97323Z","times_seen":3748,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"kraken14.co.at","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}