{"report_id":"5ae3a87a-4f8b-4152-8cd9-42e7d93f90c3","version":6,"status":"done","tags":[],"date":"2026-05-08T08:13:00Z","url":{"schema":"https","addr":"krakenaaspdd.com","fqdn":"krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/admin/auth/login","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"title":"Admin | 登录","dom":{"size":9530,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6380)","md5":"79e5830a1a92bf7dc81af9bf5fc4dff1","sha1":"20db76270fed1f69f5324207fdb20afa1743a5d2","sha256":"7363066602171217b7d2d8d79bb947ae7fdc2624ea68355f39be0d1bff899130","sha512":"265c2f2341774b1fea093d2cf47c8b20fe4d0f58fb51f37e1f03ad27a4f37ada440866dd677ea712dc867c18c52b7ae626c0684168bae746ce27f039f548dc9e","ssdeep":"192:/4idZw2zrodSbVsDID5Qb2duf8yZIzeCy0Z784zaqc:/4idZwh4r5ytZIzeCyCGqc","tlshash":"aa127d616e632fa3502b5cc03943a71de895de17a168999cf2fdc9d02f68f534c37498","dom_hash":"domhash6aeadf4c74ea2620bf18e23557b9d7af","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krakenaaspdd.com","fqdn":"krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T08:13:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"admin.krakenaaspdd.com","ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"domain_registered":"2026-05-06","domain_rank":0,"first_seen":"2026-05-08T08:13:00.893231Z","last_seen":"2026-05-08T08:13:00.893231Z","alert_count":40,"request_count":10,"received_data":415284,"sent_data":11517,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"iCheck","description":"iCheck is a library for customizable checkboxes and radio buttons.","website":"https://github.com/drgullin/icheck","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}]},{"fqdn":"krakenaaspdd.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":2,"received_data":10649,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/admin/auth/login","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c78fa25d09f8c366ab81cc681c1a88e3","sha1":"ab3b02ab3c76554843fd7130899ec6c783be64b0","sha256":"1b8aee98ff5c2b71cd73b3ad19967532f147633bb02782e387556a9b65714d75","sha512":"46a41554877720d9b5e496dc2bf2e9e881aa9f74ae6eabf0a0bb4044a2c1fe004a43da95aad050fa69e023775ad55fdc04593538d5dd273be4867ad17fc6e408","ssdeep":"","tlshash":"2bc08c8b6df0664873f720aa083fc5110321021a0a84ac443bdec2da8fde9bc7293e0c","size":181,"data":"","first_seen":"2023-03-07T01:16:05Z","last_seen":"2026-05-31T05:48:26.055654Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/bootstrap/js/bootstrap.min.js","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6d6c550cb657155feb06fdcd34b73cb","sha1":"27947c0c0fa837da9bdfdfc36f649c25f54bd1c0","sha256":"267a83092a5fd6ec5fb746bce12d440abd37f1d649c072f653e17d0c800eb647","sha512":"f57baade307d54d9e4b7c820d1b5ef32e948df73789c8fcd51bf0b1ac7d282f05b540d14ddb0b5644c44bdc6f991ae67c9f4a78595f4b33bd91601a24aef1402","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcEGf3Z1RQ:oe78+S1Klvl83ZrQ","tlshash":"80f29606b23031a107efb1e5515b020b7239696ee90690bc78b5dae53db9c48717bf3d","size":35951,"data":"","first_seen":"2023-03-07T01:17:47Z","last_seen":"2026-07-24T10:17:45.677408Z","times_seen":1404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/plugins/jQuery/jQuery-2.1.4.min.js","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-24T13:47:04.483676Z","times_seen":26132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/plugins/iCheck/icheck.min.js","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8011794c92c6e1476cc7c5811c5c2095","sha1":"b5ae4e9efe2d42a55d0e01b2bbc43b9a518996c4","sha256":"6102d725c22f9bf27ef542ceae070843153f3e0926b89820a75f29b107e33cb2","sha512":"3e3bbf5e8d76da49513cdcd72590914b520b08c1325895bbecfb9ec61f763dc25904d0650ae6d3dfdd63f877ee270474012c839ae77ed32e5d7972548de9b2f4","ssdeep":"96:GRLzvsPO6TI9Ri6pX49d3tKxy1RuibBL0fXz99GKaePSatA:AU1Mni6po1pBLWR9GK4iA","tlshash":"1b91c75dbbc132a771ef70d612db8002727a8431f6500d5ab1a6a2942ebd8718237ebd","size":4516,"data":"","first_seen":"2023-03-07T01:16:05Z","last_seen":"2026-07-24T11:09:43.033171Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/bootstrap/js/bootstrap.min.js","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-8c6f\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32148)","md5":"b6d6c550cb657155feb06fdcd34b73cb","sha1":"27947c0c0fa837da9bdfdfc36f649c25f54bd1c0","sha256":"267a83092a5fd6ec5fb746bce12d440abd37f1d649c072f653e17d0c800eb647","sha512":"f57baade307d54d9e4b7c820d1b5ef32e948df73789c8fcd51bf0b1ac7d282f05b540d14ddb0b5644c44bdc6f991ae67c9f4a78595f4b33bd91601a24aef1402","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcEGf3Z1RQ:oe78+S1Klvl83ZrQ","tlshash":"80f29606b23031a107efb1e5515b020b7239696ee90690bc78b5dae53db9c48717bf3d","first_seen":"2023-03-07T01:17:47Z","last_seen":"2026-07-24T10:17:45.677408Z","times_seen":1404,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/plugins/iCheck/square/blue.css","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/plugins/iCheck/square/blue.css HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-64b\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1611,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"37fd35194ed2735b31d71b8b8c063898","sha1":"d18acf65e95e79a0329d7cae5204897b79a68699","sha256":"467fefb5320f85af9c3dd29605d3a6f33cf29048143ae24dc2bdb1f345b16228","sha512":"ddfff7e103a0ee450286fceb535c25e3a59632fef5ba3f79c747c3f6b903d25f94a2625a9551d3481575318059118272f4f5bf1cac836b310ca9bcebad0a0bcf","ssdeep":"","tlshash":"7131382ade9326163cefd12116226252d3355413d601debc3a4eb1644fcbde020bbfb4","first_seen":"2023-04-10T02:33:10Z","last_seen":"2026-07-18T15:00:06.207669Z","times_seen":468,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com//admin","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:12:41.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET //admin HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://admin.krakenaaspdd.com/admin/auth/login\r\ncache-control: no-cache, private\r\ndate: Fri, 08 May 2026 08:12:42 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImV1UUtYdUlacEMxQytDSXVscWRmSWc9PSIsInZhbHVlIjoiZEROXC9NNXdnc3IxS29XTmxaOFpjMzRNVjNLeFVld0pFalBjNHNBbTRSOXNwQ3dcL0pPSTJYZGVLTmI5WjN2YnhmZm56ck4xZVZZdU5oVWRKeXF6ZEVRbE1rSzJnSjIrMmoyWjR5SUMzVCt4RzdzRWMzaHVnYzZDYVZhK3VaR1wvUjciLCJtYWMiOiI5ZTIzMTM0ZDJmMzhlNzYyZWEzNmYxMTY4ZTE5Nzc5OTdhMjJiYjY0ODNhOTU3ZDliYzQwODYyMzgxYTFiNTEwIn0%3D; expires=Fri, 08-May-2026 10:12:42 GMT; Max-Age=7200; path=/\nkraken_session=eyJpdiI6IlwvTnNIMjY0K2E0K0hcL2xNQU1xSnZRdz09IiwidmFsdWUiOiJoTzBHaFIzb1FtSlFrZGhpYW1YYzZUenZqQ3hRekE3eEczaWdzOW51TVNPSVlsKzJrZGlhTmhjbnlRdzc2ZXNRUG8rdVBhTjFSNXVkRlhxbWlDZmhKNW9QU0UyQUxHV1JoaUxWZXR2aGJ1UFZqVDJ4WkdkR2hpeXRNdlFIQUZrcCIsIm1hYyI6ImZiNTYxZGY1MmUzYzY2ZmQ2ODY4NmJjNzc2ZTUzYzM5ZGZhNGU2Njc5OTI1OTE0N2NjY2QzMTM0M2RiNTFmNmUifQ%3D%3D; expires=Fri, 08-May-2026 10:12:42 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9548,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":1711,"timings":{"blocked":713,"dns":211,"connect":246,"send":0,"wait":286,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/bootstrap/css/bootstrap.min.css","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-1e71e\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"5c81f3515ebe49090def2ff5d74205ef","sha1":"74e2d36365db55bc2fbf077414a542d95f7ec95b","sha256":"50ec4cbd3d33cf81e3077355131fe160196ec4b217063817642aa1163ac27978","sha512":"7172c3e1c92fdfa3188284580b48a061a0730c6b9324712cf18daf247630e03f35c109a3da649738c5e93ef74b836b0474d0b0bc97ba1faca18df8650a51feca","ssdeep":"768:ayfGpwvF+Po2lJJd4xYOKfl3UerINEGI9+FCzP+MFmWpeGuesvS1Fk:0wvQ9IYOKfl3UeWElLzrDG","tlshash":"51c3a560f11031ea3323c54d75e0edc7221ab152e56a5eb7f12f25d84b856ca2ab3f1a","first_seen":"2023-05-01T17:54:48Z","last_seen":"2026-07-15T00:30:24.49804Z","times_seen":13,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/font-awesome/css/font-awesome.min.css","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-7918\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-24T14:53:03.25276Z","times_seen":302143,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/bootstrap/fonts/glyphicons-halflings-regular.woff2","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:44.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/bootstrap/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/bootstrap/css/bootstrap.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18028\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\netag: \"627c0a50-466c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-07-24T13:09:26.389928Z","times_seen":50859,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenaaspdd.com/","fqdn":"krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:12:39.205Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":0,"dns":71,"connect":264,"send":0,"wait":0,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenaaspdd.com/","fqdn":"krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:12:40.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.sto-admin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 12:30:21 GMT","end":"Sun, 21 Jun 2026 12:30:20 GMT"},"fingerprint":{"sha1":"29:2A:EE:4D:83:BD:00:00:C9:18:57:AE:28:3F:04:DE:4B:4D:5E:FE","sha256":"19:38:FA:6F:5F:31:8A:9B:E6:64:79:DB:9E:60:9C:54:74:5D:32:F6:A8:2E:58:1D:F9:9D:68:88:61:28:B2:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://admin.krakenaaspdd.com//admin\r\ncache-control: no-cache, private\r\ndate: Fri, 08 May 2026 08:12:41 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkQ4V1wvTGNEbUJrODVZeWtuUUJCczBBPT0iLCJ2YWx1ZSI6Im9vQnh4bkpMNjV0U0RBMDdldEh6cWM3SWNHaEdkWmJKQmZNUVp4ZE9cL0dlY2FuWTVyZWROc0NBVHpqdVFnK3BWbWV2RGsrTlwvZ0FENUY1VUZSYXpFWjBUMEdaemZcL2QrVXFaTHk3bDlKNlBHakk5NndnWUJCNEQ4elNTZWRlRkpvIiwibWFjIjoiODU1NTc0ZDdjNzhlMDQ2YjdkMDBjYzliMDE4NjI3NDJiOWZlODUzNzY1NGQ4MmQ5Y2YxMzlkNjZmNGVhNWEzMCJ9; expires=Fri, 08-May-2026 10:12:41 GMT; Max-Age=7200; path=/\nkraken_session=eyJpdiI6IkY1bVRNTG1HYThsOXdrbit2N2tYbXc9PSIsInZhbHVlIjoiREIxb05vdDVrdHkrNzlZMmN5U2xuN3RSeWtxYllMaEpxWlwvb0ZUSnhGRWVpaERpT3FvY0RqVkNFdXg5c0xPVWVzWnRyaTcwSVBhN3NmNGtkb0FOZ2xiYlYrb1pBbUZLd2o3dkwxaThDaE5vcm9wbGhZVTVvNFdcL3dHVWRjV3NsaiIsIm1hYyI6Ijc0MGY3OWEwNWNkMWYzMTJlY2QxM2M1NTkwYTU3Zjg2NmM1M2Q1YjU5NGZjNmM0OWUwNDg5OGJiZTdmYzFjNTYifQ%3D%3D; expires=Fri, 08-May-2026 10:12:41 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9548,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":1311,"timings":{"blocked":509,"dns":1,"connect":248,"send":0,"wait":293,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/admin/auth/login","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:12:42.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /admin/auth/login HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImV1UUtYdUlacEMxQytDSXVscWRmSWc9PSIsInZhbHVlIjoiZEROXC9NNXdnc3IxS29XTmxaOFpjMzRNVjNLeFVld0pFalBjNHNBbTRSOXNwQ3dcL0pPSTJYZGVLTmI5WjN2YnhmZm56ck4xZVZZdU5oVWRKeXF6ZEVRbE1rSzJnSjIrMmoyWjR5SUMzVCt4RzdzRWMzaHVnYzZDYVZhK3VaR1wvUjciLCJtYWMiOiI5ZTIzMTM0ZDJmMzhlNzYyZWEzNmYxMTY4ZTE5Nzc5OTdhMjJiYjY0ODNhOTU3ZDliYzQwODYyMzgxYTFiNTEwIn0%3D; kraken_session=eyJpdiI6IlwvTnNIMjY0K2E0K0hcL2xNQU1xSnZRdz09IiwidmFsdWUiOiJoTzBHaFIzb1FtSlFrZGhpYW1YYzZUenZqQ3hRekE3eEczaWdzOW51TVNPSVlsKzJrZGlhTmhjbnlRdzc2ZXNRUG8rdVBhTjFSNXVkRlhxbWlDZmhKNW9QU0UyQUxHV1JoaUxWZXR2aGJ1UFZqVDJ4WkdkR2hpeXRNdlFIQUZrcCIsIm1hYyI6ImZiNTYxZGY1MmUzYzY2ZmQ2ODY4NmJjNzc2ZTUzYzM5ZGZhNGU2Njc5OTI1OTE0N2NjY2QzMTM0M2RiNTFmNmUifQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 08 May 2026 08:12:42 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; expires=Fri, 08-May-2026 10:12:42 GMT; Max-Age=7200; path=/\nkraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D; expires=Fri, 08-May-2026 10:12:42 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"iCheck","description":"iCheck is a library for customizable checkboxes and radio buttons.","website":"https://github.com/drgullin/icheck","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9548,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6380)","md5":"b5cddc225793ab151dd917b27b8ab073","sha1":"ad0856fce70f56cadb88726d37672388da6b0503","sha256":"16033dc6274688f4d4df0b3674e2412281b26a68064af023af051a2255d5814d","sha512":"14ba17b1779e69d99b93275f1ef74c7e6bb93371725dd0e5b1f391eeaeb36adc1d0cce1925e7807872373b9d40a4238f47fa5a19e63b8873eefeab5749241759","ssdeep":"192:d4idZw2zrodSbVsDID5Qb2duf8yZIzeCY0Z784zaqc:d4idZwh4r5ytZIzeCYCGqc","tlshash":"b1128da16e632fa3502b5cc03943a31de895da17a1a89998f2fdc9d02f68f534c3749c","first_seen":"2026-05-08T08:13:04.905452Z","last_seen":"2026-05-08T08:13:04.905452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/plugins/iCheck/icheck.min.js","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/plugins/iCheck/icheck.min.js HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-11a4\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"8011794c92c6e1476cc7c5811c5c2095","sha1":"b5ae4e9efe2d42a55d0e01b2bbc43b9a518996c4","sha256":"6102d725c22f9bf27ef542ceae070843153f3e0926b89820a75f29b107e33cb2","sha512":"3e3bbf5e8d76da49513cdcd72590914b520b08c1325895bbecfb9ec61f763dc25904d0650ae6d3dfdd63f877ee270474012c839ae77ed32e5d7972548de9b2f4","ssdeep":"96:GRLzvsPO6TI9Ri6pX49d3tKxy1RuibBL0fXz99GKaePSatA:AU1Mni6po1pBLWR9GK4iA","tlshash":"1b91c75dbbc132a771ef70d612db8002727a8431f6500d5ab1a6a2942ebd8718237ebd","first_seen":"2023-03-07T01:16:05Z","last_seen":"2026-07-24T11:09:43.033171Z","times_seen":1100,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/dist/css/AdminLTE.min.css","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/dist/css/AdminLTE.min.css HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-163ca\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65311)","md5":"ce987fa4517cfda3d1fff46da1fabd55","sha1":"9466e28db99cb942004df787d01056b378c09bf8","sha256":"a0e15a084039674b3bfc486f4edd5b2523432de7393cd04b2a5207c9b5c2811d","sha512":"d611054142ceb581869321e82d1161307dd3d540084de3ff9cd455f7d5e602605cda61cf7e3606477396b54da055efa3f8376d4db1dcd5978bc10aaca263b4ad","ssdeep":"1536:cspXPZovC1qE82SPfDtqMi58r766i/L7MJopW:csH3ME82SPfZJp","tlshash":"9d938431f8e430657167811d74e1eea9226ea5a1e5068b7ff237b26dcfc12cb2593b01","first_seen":"2025-10-31T21:30:00.916295Z","last_seen":"2026-07-15T00:30:24.495097Z","times_seen":9,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.krakenaaspdd.com/vendor/laravel-admin/AdminLTE/plugins/jQuery/jQuery-2.1.4.min.js","fqdn":"admin.krakenaaspdd.com","domain":"krakenaaspdd.com","tld":"com"},"ip":{"addr":"192.238.181.185","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.krakenaaspdd.com/admin/auth/login","date":"2026-05-08T08:12:43.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.krakenaaspdd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:24:42 GMT","end":"Tue, 04 Aug 2026 08:24:41 GMT"},"fingerprint":{"sha1":"87:45:7C:1E:A5:4D:35:65:76:01:98:CC:95:9B:A3:B0:E9:65:C3:61","sha256":"5E:6B:09:96:FC:34:9E:5F:82:4D:D8:D7:BA:3E:DE:DE:4A:18:B9:60:B0:F6:58:FA:3E:5E:3F:C0:41:20:12:72"}}},"request":{"raw":"GET /vendor/laravel-admin/AdminLTE/plugins/jQuery/jQuery-2.1.4.min.js HTTP/1.1\r\nHost: admin.krakenaaspdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.krakenaaspdd.com/admin/auth/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IjhcLytzMjVzQTRJbmg4WVNXaHMwOFRRPT0iLCJ2YWx1ZSI6ImZ0WWIwdVJMblExdlpNV0dzc3EwV2Exb01uK05uNVhXSDZJbDI1T1c4ZGdDUTJtMjZJVTFEeXJQeFJHejBZdERQd0hXTmVvNDhYaVp2WVZEeHBkODN0TklyRTBWRXprRHJHN2RIVGhUdVY3WDRaQVR2MHA0XC9GVU1PS1E5MktWOSIsIm1hYyI6IjdmNjNlZjUzNzZhODhkNDhiOTBlZGQ1MTMwZGRkMjg3OTI5NWMzZGExYWQ3ZWNjYTZkZjYxNWQ2MjdlMjY2NTYifQ%3D%3D; kraken_session=eyJpdiI6IlBPQWdFT0tXZHA5T0ZqbXdDazdxYWc9PSIsInZhbHVlIjoid0VxcTluaHhZQzUrQXJzQWtiS3RYV3lEVXJQSktYeEgrSGFZeWZ1SW1MZVg3TFkwUVA5dEN5ZUNUOGMzSHcweXpKcHd3S0RBWm9FQVFRN1ZwdXVmbkwrOUk0RWNhdGpNXC9MUGkzc1pLMlpaT1lEc0N1MG40ODlycHZQXC9ydWh0VyIsIm1hYyI6IjQ5MGEwODAzZWJkYmE1ODVkZTczY2EyZTM2MGViNmQ5ZjU1Mzc0MGQzOTczYzJkZjZiZTc2MWM0MDBiZmY4MzMifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:12:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 May 2022 19:11:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627c0a50-14979\"\r\nexpires: Fri, 08 May 2026 20:12:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-24T13:47:04.483676Z","times_seen":26132,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"admin.krakenaaspdd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"admin.krakenaaspdd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}