{"report_id":"5eb1dd4f-a5e9-402c-b6cb-ae371dd6271c","version":6,"status":"done","tags":[],"date":"2026-01-13T18:26:43Z","url":{"schema":"http","addr":"krxrp.com","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"104.21.41.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"title":"1 new message","dom":{"size":1479,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (443)","md5":"3ea36550a5cc653b4d5e16478d8107eb","sha1":"ca0a92ed2087b139870403df42d1d604bc01abc2","sha256":"4ace51f5a424c452de2bd5cde720ecd82eed67f9aa76889cf34b8a4d87867823","sha512":"b66b7182290cb18cfb3773c8dc7c293d79c7de51bc60e76a920a93528b1f9ecb17ed5cfe1a13f6e634b0128bee22c9124b5e84f9f06fafc9132a57ed9e45a803","ssdeep":"","tlshash":"d731eda3e38f648d3241c06850f1f2b81e3ea158bb015f25bc20b7736f8daca58a2951","dom_hash":"domhash003fb3f0de8126b803198d4c3d676989","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krxrp.com","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"104.21.41.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T18:26:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":305977,"sent_data":864,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"krxrp.com","ip":{"addr":"104.21.41.204","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":56,"request_count":28,"received_data":1360191,"sent_data":25650,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":27,"received_data":1365984,"sent_data":12270,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":7451,"sent_data":2540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vsa65.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3123512,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":417,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/69651b627304bb197d094a12/1jepf5udi","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77051d00b3c0f63362a86c83e0ac87e7","sha1":"cbfd27a97a7f85a930c2090dab7befbcf3cb01b0","sha256":"79f583eb2868a14c04181dd38adc40b3fc52add7e88a921f996ecec611b06075","sha512":"d52f49c9e5f4991d2930ef92df97c9811bff7484481b8b41f5514a83213865debf0ac0fb95cfc61f43fbb92e6bc23fc2de221ea2c170e068a1bb12be4fafb927","ssdeep":"","tlshash":"be41bfd26f9f1866936510dc0cfefe0e747721fa49986c9247080c517a666ad2f8ed28","size":2123,"data":"","first_seen":"2026-01-13T01:22:59.354679Z","last_seen":"2026-01-13T18:27:09.57518Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-23T03:51:41.766232Z","times_seen":91193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"890a2ff1f0bf72e7b248d102ff79740e","sha1":"201364499dd1839b7b4c491d89a865cc237063e3","sha256":"ef4ad578694c8fb01728aa2043d57113ce46d562939dad05ae75c172f4c1fb35","sha512":"15211872fb2591548ace05e32ff371957157a3a6f21e980e4f66161755aba29d1f23e53f9794ddc9c098d3e5c19895127f486114cff559ce641ee58298569721","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOQcErQYIMPdLMz9o115:kyWFW1W+fM4f8kBLMz9215","tlshash":"c234c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2025-12-29T13:02:03.600994Z","last_seen":"2026-06-13T18:18:43.537665Z","times_seen":3819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"51bd9c1a4f257a72e59354479a869b78","sha1":"be11fa63ba6cdd4a1c16dd279adeeade89f6a394","sha256":"43fd2fd7bfe0a90ef245cb9360fe4a1b6ffa114e26cbee586ec1bf45941650cf","sha512":"8be6cb4339385a491df1aaf8fe2e0f4fd8197c3dd5f77f9a2ea1e36afa917c04b25aa13e3b75b92b0e60ac8f4f173eddfd45ba6ffe2cbe6fca106a77d9019a84","ssdeep":"","tlshash":"c7d0239529758d30659c02476076e7e82671319177117601c1ddcc7b6f11fd305f195c","size":217,"data":"","first_seen":"2026-01-13T18:27:09.616392Z","last_seen":"2026-01-13T18:27:09.616392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324110,"data":"","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-07-23T03:51:41.789286Z","times_seen":48249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"573176a5696bc8177ef9cd22d0314c04","sha1":"d2df89ca54fab39b53d35912867df378a296d4f7","sha256":"63ec3e8ad1852f45903471a3c14e92bc8c52d642add091aef6566c845d79ec17","sha512":"0dd9982a020f84f23ffe6a1882d276b587e39d0b9378f0b7f2208d441a0827fac1d819fb315747cd4c7a938fdd066045375c4a57e854f84a265c069635958586","ssdeep":"96:zNC9Hqt7pEma7hY/rcK3JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYxLRIvgx43nVY","tlshash":"08b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66565f218784cba077b39","size":5261,"data":"","first_seen":"2025-12-29T13:02:03.575644Z","last_seen":"2026-01-16T01:10:38.060616Z","times_seen":1980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd334ca02da729de662d9c4f3a3c1b08","sha1":"c4d597fc0b45c88349c9386a1dcd9b743d546d7f","sha256":"ca0743a74dc010d603d8b170fbe2a9df6a0540db8ad2338bac2c26d52a885052","sha512":"df2f6995fef3a464e3105ef05560f3cbab5a2eb6928f878e5c3926fc7682fd5f0e662e5ac1d01628aa7d5c327157c1e9eff0abb9d948f6caab1eb3591a047c2c","ssdeep":"192:kHNM+/RIU9HkC40V2tl+f9lVo7QYcb26o5A8f6uYZvUZaUZSPgM:G/b9HkCreHA87YZHh","tlshash":"fa32d7c6f9c7b9624227524841efa218f73f2a947706dc18f06899f30a948c75077bbe","size":10989,"data":"","first_seen":"2025-12-29T13:02:03.629914Z","last_seen":"2026-01-16T01:10:38.090265Z","times_seen":1458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b4359ddef38a38d73a020b75ae0eada","sha1":"8e430241157a3618237b94786f71d90411366b1e","sha256":"98bdb92efa9cb16b3faa6adaa13629dd3b1f800222e07fcf8087c3d3a46c3bde","sha512":"1f56aeb2f726daed834534a49f0bdacf24bc6e0da191562c4bd3fb7c575ae30413c869800cb07dda184522bf23faec3c375270f685d916c4aa4d85160dc189ad","ssdeep":"384:UJw/U5YK8Hx9KJNThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJNThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"0352c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2025-12-29T13:02:03.587693Z","last_seen":"2026-01-16T01:10:38.073094Z","times_seen":1791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06b3d1d4768c7fa3c9280fe71898f58b","sha1":"6ccb7d3ddfad4a07849870168ccfb688d9e68a14","sha256":"35afdec53f99f6cb402ad2b780762bf19ef9ceaaf4c79e9d5b854636abbdb828","sha512":"c9085d5849bb21a33b2823f8ed2821dfbc7634efbb03a8ce0b2a0b6c0e7111cab497b45b25430cf1abac44e2364be2925c42f9810acfc9a3bfff9f759224c9e1","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFYjdZPkx3u4V5pfYMrlSf:4nmuTilGhmnx3u4V5pPrlSf","tlshash":"77a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2025-12-29T13:02:03.567496Z","last_seen":"2026-01-16T01:10:38.053132Z","times_seen":1959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"51bd9c1a4f257a72e59354479a869b78","sha1":"be11fa63ba6cdd4a1c16dd279adeeade89f6a394","sha256":"43fd2fd7bfe0a90ef245cb9360fe4a1b6ffa114e26cbee586ec1bf45941650cf","sha512":"8be6cb4339385a491df1aaf8fe2e0f4fd8197c3dd5f77f9a2ea1e36afa917c04b25aa13e3b75b92b0e60ac8f4f173eddfd45ba6ffe2cbe6fca106a77d9019a84","ssdeep":"","tlshash":"c7d0239529758d30659c02476076e7e82671319177117601c1ddcc7b6f11fd305f195c","size":217,"data":"","first_seen":"2026-01-13T18:27:09.616392Z","last_seen":"2026-01-13T18:27:09.616392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"104.21.41.204","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eaecb01ebb5ce3e9a07afdea0c321bb","sha1":"27f776d70c71f46f79049c9978b11d72e775adfb","sha256":"a8fbb8edfe7920cbe268a70bb6d1bfe74cb5ec13b3db41cc9536130f79d426cd","sha512":"da03d9ca0088ada5b3d9c54c5ad7b268d921e97ad60bcbe8df98c36a2dac2866e18469ee54565b127f21d491a7f0f6a5b4afc411e454bfbd818c604c796f5997","ssdeep":"","tlshash":"d5f0c038f160b1ea8bc16066047e965ee4351753f443d49bc406e1119d069dd2e9ae3b","size":538,"data":"","first_seen":"2026-01-13T18:27:09.618052Z","last_seen":"2026-01-13T18:27:09.618052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-23T03:51:41.787691Z","times_seen":91220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"872f914720cfc7b657f405012ea10c8a","sha1":"1bf2386624138057451b1bdd97311e9ce1e7d0ae","sha256":"1a9ec11e322de9a2af57eeffaa69f67b49556972fade1dff81f46664427aeb63","sha512":"5cc6f30901cbb79151b79139f3a8b4e83c7a1b9e170447b4c49d177b1edc77706785552ba2b071c5bd69d95a224a4482f8b6ec7765aa25423ff42a798ec56c99","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCwGN//h6LiJq:SzP2DaSLi8","tlshash":"61822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2025-12-29T13:02:03.603079Z","last_seen":"2026-01-16T01:10:38.088072Z","times_seen":1977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-07-23T01:07:21.826383Z","times_seen":50602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"104.21.41.204","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2c610f5052cc10cb7b5fc892d2ebd6d","sha1":"03521be85da1066c20f3a2e25d2da10c6a46c1c4","sha256":"0b64094bf344a1a476bb74c31b56d9c305d95575cff5fd4f652b34c01842833c","sha512":"e47ddd5be456507e0ffce363855d6d99f539a7372ac8725e9944a804cfe22bf9899e3eebb878d5ceb9e8fc2b5535d021c0c89978e8d09d06165b873f56686ee7","ssdeep":"","tlshash":"e211c4753b195534c5c54187317ee7a93d3260617a02a145c3accc255d18e8714dfcbe","size":902,"data":"","first_seen":"2026-01-13T18:27:09.621013Z","last_seen":"2026-01-13T18:27:09.621013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"104.21.41.204","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f37383e7482230412ec0fe7182d38bc9","sha1":"3699864cfa7612dcf9994c7884bd5e1d890060e5","sha256":"21a626873161f0a31ff0ddfe4a83ec0353b300beb76a7fd65c97343a550aa263","sha512":"a7d578e2b10b6b6db8befb1c0d4d085f0393c558bdd54c2a8e2e90646016e20b31944fdd3a0b66f34694d5a7d56f3ba4043aa4d0bdca2a4dae63dbf35107ffc8","ssdeep":"","tlshash":"21e07d6d2685bd759383569724b2ee1c30633034e9559810afef8c492a0ce8e9414f9b","size":324,"data":"","first_seen":"2026-01-13T01:22:59.414303Z","last_seen":"2026-03-30T22:46:03.631086Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91fa452cb811ebfd42913ed7aea74006","sha1":"060bc71fe2e4a1f9c98df43b6aba2b2687e12d90","sha256":"624283bdfab2d0b2de4ed2d5e1c443fc4ee513b426345414e625a8d69a058674","sha512":"c8a8fe4bf2b22533178ec9c9be10d7ea9983058b49b5c540bc481621df9e1dafd257e753546e4ce3ac231caae0f86e2e05fc4a3088b78e369607031b07d289f0","ssdeep":"","tlshash":"5441b5d936e4f9ba834328e1043fa016b6353836487be8c0531dd8f5bc38c45811afb2","size":2306,"data":"","first_seen":"2025-12-29T13:02:03.646562Z","last_seen":"2026-06-13T18:18:43.504645Z","times_seen":3819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-07-23T03:51:41.756113Z","times_seen":64700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-07-23T03:51:41.751118Z","times_seen":40640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d77a9c838d24431708203ea18f5a5dc8","sha1":"b6f094cba46d5ce5b713f83d2fea467e5eea8120","sha256":"3f0c5eaa10c8d7bb751b487b54ce1c59bc39dd6ec2db5acec99272af7a4d1ddf","sha512":"971db498c52511317d34341a0af0d24676499180cfc244a82a2ecf921b3a21aaf0995693e0682f1c6bc7787a1336980e3fb7edaea1be07660386f093fba4fff6","ssdeep":"192:ExL3EqzMHvTF48FDAHnl6bWkKO6n0U2ZKNdB9JjlT6+1l:ExLUqwHvTF4EDSn4KkKBn0UUKNP936kl","tlshash":"b022c78b7e497195c3a128f11c5336cd202a7f99c03c5c6a9309c9a57f687da24eaf0d","size":10580,"data":"","first_seen":"2026-01-13T18:27:09.61079Z","last_seen":"2026-01-13T18:51:56.655924Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-23T04:25:46.180195Z","times_seen":121841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/aes.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"535ff81ab45764c67a7336a70ee7c7a6","sha1":"c1cdb3fc5b8e033fbc2be2638b6189e9f3a4f669","sha256":"991fa3ac0febff65dd238aa07315e6ccb792fb207828b371de8cb353bd4dd121","sha512":"6d26238586710be6349ae23453c110b7d816cd4c0152f24e7c83de117e52d6af3a1aa66d07e9d9c107889a67d13ca84cfeed8abb2ed3403f4d56621846a4fca2","ssdeep":"768:24ecwcqZhf5pl9hKw/PAMZcaEpcj4JAT4tmMF21:Mln","tlshash":"e6b28bae35b0b47e4e8b7f31394a05e2ac67c521ca8a104df148bbd8e1dc5525978bf3","size":25638,"data":"","first_seen":"2023-03-07T12:27:07Z","last_seen":"2026-07-14T21:15:46.210869Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-23T04:25:46.180195Z","times_seen":121841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/34bf3cad5bbd6648.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdb3775e7728004a49268e1c88ba74d0","sha1":"4320eeaaa633227188e5897151f1ec26ceedeffd","sha256":"191ba4211e108d8376bd720b8a1fa551d6cb09e9bd557e3fffbb7c5a1bfc0b72","sha512":"1d27224c8e71808f0e9c5400e6094106659f9388f21568c3f32655a2acaa8e04a22eedad6c6b51cdf1f5528f448e695d27f443d1c6426e9d6d07bd8a72fb678d","ssdeep":"6144:KQftPoUrIgMo6crPc99cb/5FQOYnz5lD9PrFAI:KQfZXR6crPc99KFQOkD9uI","tlshash":"e86418e931d6b02243a659f1507b000bf23d2965340d89a8f1acdddb3d7a85992bbf6c","size":310528,"data":"","first_seen":"2026-01-13T18:27:09.517809Z","last_seen":"2026-01-13T18:27:09.517809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"104.21.41.204","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T18:26:21.933Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 13 Jan 2026 18:26:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://krxrp.com/\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9u0cnkuAAUybAl4DtFVI6Lf2GuOPwezE%2Bm%2Br%2FCKUq7p40MjqM0BqZ%2BaIQDtQ1PmxBjVGlQXBXqx8BV6QtoewiLoIvPmgWKZ5MQ%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bd6f1071b9a8deb-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1843,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/34bf3cad5bbd6648.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/34bf3cad5bbd6648.js HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6CaVGhIZlOZOWohdvuBV%2Ftu%2BuBfVsY%2BDpE3xiiKBuNc25ccQAZAlcCtYsnaQyHisr7DaPAfJgLc1P0eerMt9%2F7jeC82MCEowA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:23 GMT\r\nx-cache: HIT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f10ebb05120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310528,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35756)","md5":"cdb3775e7728004a49268e1c88ba74d0","sha1":"4320eeaaa633227188e5897151f1ec26ceedeffd","sha256":"191ba4211e108d8376bd720b8a1fa551d6cb09e9bd557e3fffbb7c5a1bfc0b72","sha512":"1d27224c8e71808f0e9c5400e6094106659f9388f21568c3f32655a2acaa8e04a22eedad6c6b51cdf1f5528f448e695d27f443d1c6426e9d6d07bd8a72fb678d","ssdeep":"6144:KQftPoUrIgMo6crPc99cb/5FQOYnz5lD9PrFAI:KQfZXR6crPc99KFQOkD9uI","tlshash":"e86418e931d6b02243a659f1507b000bf23d2965340d89a8f1acdddb3d7a85992bbf6c","first_seen":"2026-01-13T18:27:09.517809Z","last_seen":"2026-01-13T18:27:09.517809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"44b9fc99078bcfe4490fb15034bc1e15\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28236\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1121f497129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"3b4359ddef38a38d73a020b75ae0eada\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1198c5756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"3b4359ddef38a38d73a020b75ae0eada","sha1":"8e430241157a3618237b94786f71d90411366b1e","sha256":"98bdb92efa9cb16b3faa6adaa13629dd3b1f800222e07fcf8087c3d3a46c3bde","sha512":"1f56aeb2f726daed834534a49f0bdacf24bc6e0da191562c4bd3fb7c575ae30413c869800cb07dda184522bf23faec3c375270f685d916c4aa4d85160dc189ad","ssdeep":"384:UJw/U5YK8Hx9KJNThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJNThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"0352c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2025-12-29T13:02:03.587693Z","last_seen":"2026-01-16T01:10:38.073094Z","times_seen":1791,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"06b3d1d4768c7fa3c9280fe71898f58b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1199c5d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06b3d1d4768c7fa3c9280fe71898f58b","sha1":"6ccb7d3ddfad4a07849870168ccfb688d9e68a14","sha256":"35afdec53f99f6cb402ad2b780762bf19ef9ceaaf4c79e9d5b854636abbdb828","sha512":"c9085d5849bb21a33b2823f8ed2821dfbc7634efbb03a8ce0b2a0b6c0e7111cab497b45b25430cf1abac44e2364be2925c42f9810acfc9a3bfff9f759224c9e1","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFYjdZPkx3u4V5pfYMrlSf:4nmuTilGhmnx3u4V5pPrlSf","tlshash":"77a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2025-12-29T13:02:03.567496Z","last_seen":"2026-01-16T01:10:38.053132Z","times_seen":1959,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326436\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f11a1c7256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-07-23T03:51:41.790131Z","times_seen":48079,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/coins/5c970ed7a580df5b.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/coins/5c970ed7a580df5b.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aR2Mxg7cDV6302b9OjEtaV5DQbYcJGcVl0a080lr7SXqEPnLVQ5rtZSMy2iBvSCcmQrWMChcN1idCK0aepkr6P4bom7yFed7%2FA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f11eeed3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a2cb4065a140774af98baab18ed9fc3","sha1":"d27f39588a4599177b7d05ba0f4974a42c6ab2bf","sha256":"966545f3fd4f2a43b942ba77ae164dfada19dc90f3881ab8bf71406a14bbf5c9","sha512":"221eb7f604ac303822bf49143be9e3fe79e28a18a7246aa4e47bfc29c9f2e4f636d607dabd93d418d8c157deff325019b785865a0a08d52d370091b03b4199f2","ssdeep":"","tlshash":"1501af20c36ae7945402fb3123503d3068fa11e2684094b949fa2471eb69e1f49b88ee","first_seen":"2025-04-27T09:29:37.866554Z","last_seen":"2026-06-01T00:03:27.205752Z","times_seen":18,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 16475\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6f11acd2db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-07-23T03:42:43.635096Z","times_seen":34705,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/coins/5c970ed7a580df5b.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/coins/5c970ed7a580df5b.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FFESzTk8KFhZOK2OkVhk59fmhSrfiHS6L%2BYODpLndEOPIGvie2p2GjsEtcAVxjFcqglTHepHsjKO9KjdJyo9xSdSvRwtf8pow%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: HIT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f1201f18120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a2cb4065a140774af98baab18ed9fc3","sha1":"d27f39588a4599177b7d05ba0f4974a42c6ab2bf","sha256":"966545f3fd4f2a43b942ba77ae164dfada19dc90f3881ab8bf71406a14bbf5c9","sha512":"221eb7f604ac303822bf49143be9e3fe79e28a18a7246aa4e47bfc29c9f2e4f636d607dabd93d418d8c157deff325019b785865a0a08d52d370091b03b4199f2","ssdeep":"","tlshash":"1501af20c36ae7945402fb3123503d3068fa11e2684094b949fa2471eb69e1f49b88ee","first_seen":"2025-04-27T09:29:37.866554Z","last_seen":"2026-06-01T00:03:27.205752Z","times_seen":18,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/audio/chat_sound.mp3","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/audio/chat_sound.mp3 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:36 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6687\r\nlast-modified: Sat, 22 May 2021 07:25:13 GMT\r\netag: \"55342729bd838d323e62cd653754b56e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1766191\r\ncontent-range: bytes 0-6686/6687\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6f161ffb956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6687,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"55342729bd838d323e62cd653754b56e","sha1":"bf0d5edf44a931711804b5208a08cb17b7cb4b4a","sha256":"080b933225d445901ca6b5bd03f7b660339aabc98da5547f21186d95e6022b9a","sha512":"e57274afe1565d2dac2b7b8c9e770d8c0980a4c73ad6c500e807d5ad5412b7e69b47b2633c265bb6318bc52b8a0cc4ce27ae15ed4ea25846dea7ff6eb9de579a","ssdeep":"192:cpPy6gATP+FOQSRa40jQK0MnHq6tcwYY1g3:4PZTGkb1DvMnHq6uVig3","tlshash":"9ed18e7e8d839d11401bbfd5aa8f5aca24625cc7c939d4fab0d0c05025a8edfb8c229d","first_seen":"2023-04-11T10:21:58Z","last_seen":"2026-07-23T00:17:23.074221Z","times_seen":654,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/26f3f9a2209ea95e.css","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/26f3f9a2209ea95e.css HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:22 GMT\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQF6JeaSm%2BHzcfYorYyW%2Fgcc9l5SdsHNKalwwBvQOcMEdgGE%2B5J3FvLTvuTwOchvVN4OwSfYWt7x1jmwZ%2FRbznRfj7TaCjgo8Q%3D%3D\"}]}\r\ncf-ray: 9bd6f10aca89120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (22280)","md5":"df7ff96a4438a632a41d45866919f501","sha1":"d3334045756381df04f9216a957d73ca121f66e4","sha256":"ded00a8d4a87ebb9bf9bf78d32c7dee577998c4225113b34589d59a9dd874ae6","sha512":"7cc9ce1b33f03dd558dc8fed59e030a81d38e9e4fdeace0a9e35c490a9cbdf0030f58b646b6f2a170179ac364fd4f8f37df43d57105fd82e29d64dc09c031e78","ssdeep":"384:A54TwU8hsjVb4AgigIvITJY2p8YRn49pGg5jo:AaTwRCjp4BLIieG49sg5jo","tlshash":"7ca2306362a1370c702bde716b982a6b7114c03bd81a27fd8d616729c7c76560fb239f","first_seen":"2026-01-13T18:27:09.544274Z","last_seen":"2026-01-13T18:27:09.544274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/4607638b1d867f57.woff2","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/4607638b1d867f57.woff2 HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/assets/26f3f9a2209ea95e.css\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98868\r\npriority: u=4,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:22 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGmjdPCwtPK5tpALiA9%2BBKz0OTvLyXpF%2BxMX6SN3bD8QW8myAEfsHsg1w1zLKiP84NOx1lllYYz08xjtpPiPufafBnRxHXwZsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f10c5ab1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-07-23T03:22:09.863279Z","times_seen":27394,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/api/bootstrap","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /api/bootstrap HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Basic Y29yZTpjb3Jl\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nexpires: Tue, 13 Jan 2026 18:26:22 GMT\r\ncache-control: no-cache\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RVGkmn0874eBlrxvo3tK3%2BuBOSPPa%2FJmsrbae1vrydmXjUJsv%2Fxy19Xz7M0c0zAFtRDYut2MvpeYRQoLcauqFCxSn4rcNOkww%3D%3D\"}]}\r\ncf-ray: 9bd6f1108b70120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2971,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7eba2f758dfa9b1f4a2dab4e46656f88","sha1":"e5bdeff7ef364439fb24fe2bfb0d8f8d39b3abb2","sha256":"8dde2fd653e721b61469cc24c5ab993258b5f16a5afde771efedef7ad7c26250","sha512":"00832c609e35528e1606555e39953001f495e9a9e7a6b99b266f8f510deccd8a7a0943b8dc6f6d7be7338447001d425b77d51c94eb1e204ae782f014634dc633","ssdeep":"","tlshash":"0851b40571403ab0574613a9bdaf29d240f920ea66e4146854df8f2c0bf8bf6ac67ac2","first_seen":"2026-01-13T18:27:09.54861Z","last_seen":"2026-01-13T18:27:09.54861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=69651b627304bb197d094a12\u0026widgetId=1jepf5udi\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=69651b627304bb197d094a12\u0026widgetId=1jepf5udi\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krxrp.com/\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-tk93\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-5-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9bd6f1137c17b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"68e1181575c95797ed789639400b86e3","sha1":"b287b2f10d768a26791ea7dab280c1299c369c54","sha256":"cfd7f4296897d892cc8ed21dfc051a9403b62187c2c5d4fa0be700768099a45a","sha512":"524569f8b5d680166ac2201250232d4b49bccefe02c50bc6b25d0ec0fecbf417b371c855ea6866d664deb0b6745d9101b3c3aeeb5c9cfb8577ea3ad8c2fac4be","ssdeep":"","tlshash":"875122298916dd3963c9925774df3a27b93dd123e384590ce0986e38c3efacc221274b","first_seen":"2026-01-13T01:22:59.362815Z","last_seen":"2026-03-30T22:46:03.564202Z","times_seen":6,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/1f96f725d1d819b2.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/1f96f725d1d819b2.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hH1r0yj8y9%2FX2UnHDkyzoJs7kiQMGOng7MSSCgasKY1aUZ7pcrIoI21rkjnSJ4zCj3MS43ZCzlOnFcV4UK3CCwrHZg%2FhK%2FkYg%3D%3D\"}]}\r\ncf-ray: 9bd6f11e9eba120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91317aa71f168b94ba1de4546c32c50e","sha1":"ae678a258cf7ef10b1933cce8f21ff01e81e0447","sha256":"f62dc5250496e5084ce4845557313c8a33dae1119bbe4979b57a3afe7fb0f1ae","sha512":"10a66e526488950fd3afef9d47db203d4a962cbf5dcb3d19b1b40ebbaffd0d2b8d0812f82f29575fb4263fb1a4a47572bc77c153475568894dfc15284234682f","ssdeep":"","tlshash":"1b7176f37344f2f4b1019b79e616516137bf28fa3f6a03815604a985b7114aaceddcc9","first_seen":"2026-01-13T01:22:59.333838Z","last_seen":"2026-03-30T22:46:03.568707Z","times_seen":6,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/coins/46c2731ade9b683b.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/coins/46c2731ade9b683b.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baYxAxbPLQFjT61XE%2BGYqdpSCFFk3m6NDrIig23ULGpRD4jKf%2FneJcfGchKsWX1PLUnoi9u3awaz%2B3PJIq0jZY6RyidZwD6S7A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: HIT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f1205f1c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3e653b491248f87f7d445414fa05230","sha1":"c5fb7624d63c2c868e787fbd9c429563349fcb4d","sha256":"56d411ae3e56d78fe8ea022824da86f7cc3155533b7909182a507199b401b9f4","sha512":"1cb05dbcdbbee15b21341b72a8aa91b3444ff34d05ddba22f69e27bccc9e790fb68cbdb7e53810aba436adde75e69829c6112272ec3c35b86682c91d94c978ed","ssdeep":"","tlshash":"7e016d50125897f54a04434cda5eb07d987260c9a9f4c0a194cbaf3ff860eab0dd5ecb","first_seen":"2024-08-20T09:13:27.284188Z","last_seen":"2026-05-27T18:55:48.408478Z","times_seen":27,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vsa65.tawk.to/s/?k=69668e503ad48120256ec828\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTY1MWI2MjczMDRiYjE5N2QwOTRhMTIiLCJ2aWQiOiI2OTY1MWI2MjczMDRiYjE5N2QwOTRhMTItZTZtdExDRHZzRG5ib1hZZ1pEXzNEIiwic2lkIjoiNjk2NjhlNTAzYWQ0ODEyMDI1NmVjODI4IiwiaWF0IjoxNzY4MzI4Nzg0LCJleHAiOjE3NjgzMzA1ODQsImp0aSI6Ik83OVItaDhOUlZsZW9NNlo5ZS1VLSJ9.DG9k3n1CuIMPyohE-WdJTAF4gKLdDv49oDp7ZJyHte3B7UnCDlfdgUES5DPNqtbLFDa8y9tKvdNr6dWz36WoUQ\u0026EIO=3\u0026transport=websocket\u0026__t=Pkuc-lf","fqdn":"vsa65.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=69668e503ad48120256ec828\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTY1MWI2MjczMDRiYjE5N2QwOTRhMTIiLCJ2aWQiOiI2OTY1MWI2MjczMDRiYjE5N2QwOTRhMTItZTZtdExDRHZzRG5ib1hZZ1pEXzNEIiwic2lkIjoiNjk2NjhlNTAzYWQ0ODEyMDI1NmVjODI4IiwiaWF0IjoxNzY4MzI4Nzg0LCJleHAiOjE3NjgzMzA1ODQsImp0aSI6Ik83OVItaDhOUlZsZW9NNlo5ZS1VLSJ9.DG9k3n1CuIMPyohE-WdJTAF4gKLdDv49oDp7ZJyHte3B7UnCDlfdgUES5DPNqtbLFDa8y9tKvdNr6dWz36WoUQ\u0026EIO=3\u0026transport=websocket\u0026__t=Pkuc-lf HTTP/1.1\r\nHost: vsa65.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://krxrp.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tLdO/HEQ1OVWKSz9GWsvnw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 13 Jan 2026 18:26:25 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: ut90dYEuEAp+2AX5Qb2KZcHQUMs=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9bd6f11a0c52723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":19,"connect":19,"send":0,"wait":490,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Dec 2025 09:58:35 GMT\r\netag: W/\"81c75a0e54497a15d75c28168b257487\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f11a8c7d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53952)","md5":"81c75a0e54497a15d75c28168b257487","sha1":"bee41e283ee688fc5a81c864c771af7766ca85d9","sha256":"e762048b625fa5fd66d8e6a4267da9c5302b149fb3ea06d4ebd943085bb53462","sha512":"34b28938bb4e80eb5c271a7d5233abffd948d538b0a4ebbf2493fd40a146d5a962330cca4bd805e32d3faf444d9c5051d71952887fb2a790b852f31ae022fce4","ssdeep":"1536:fGUifm7kUdwddCri2iLc0Lg261F2BBCsEZf:X1V","tlshash":"cf3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2025-11-24T02:42:30.965145Z","last_seen":"2026-01-16T01:10:38.098418Z","times_seen":4514,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/coins/3cedd2bf22772f6e.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/coins/3cedd2bf22772f6e.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KyvlI4nzeCizoVbvlXbn78a8otah5EX1b5q687bjUPgbJnE7Brx5JyzYcKh3qm940SCNZKErJtM%2B2rq3LjHOZvXkwBpT6iN0A%3D%3D\"}]}\r\ncf-ray: 9bd6f11f1edf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1bc01539433112b8258c192aa91baed","sha1":"e26e03f2eba1260c26575bc564c5be8c15ca3aed","sha256":"dd9daf5c8a5ef27b54f2b7ae0094ee0d90d10a5b9f95625d87ce03d99f149c95","sha512":"dd5f467b04b656f88a0234d5ef6213da02a6fddaf0b36e7d346ae7d0fb8f292912051076681d670b912693c42ce0d6fb1b90556dd76b6080a61b3647bc1cf2b4","ssdeep":"","tlshash":"5931429292e6b3bcd109d370912ebc393dd65cf53604c12d06c95692a63249e48efcc7","first_seen":"2024-08-20T09:13:27.28154Z","last_seen":"2026-05-27T18:55:48.392208Z","times_seen":26,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/coins/46c2731ade9b683b.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/coins/46c2731ade9b683b.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfb1cQhSFVtZHUGdjN%2F4%2BWI%2FsSuUsIx5pUU2kf2ofVd2uH7FrI%2FT1rRD47fgiOd5h29Vg7KUygXQwduuQeDi%2B8sGlMUVWTtT1w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f11f3ee2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3e653b491248f87f7d445414fa05230","sha1":"c5fb7624d63c2c868e787fbd9c429563349fcb4d","sha256":"56d411ae3e56d78fe8ea022824da86f7cc3155533b7909182a507199b401b9f4","sha512":"1cb05dbcdbbee15b21341b72a8aa91b3444ff34d05ddba22f69e27bccc9e790fb68cbdb7e53810aba436adde75e69829c6112272ec3c35b86682c91d94c978ed","ssdeep":"","tlshash":"7e016d50125897f54a04434cda5eb07d987260c9a9f4c0a194cbaf3ff860eab0dd5ecb","first_seen":"2024-08-20T09:13:27.284188Z","last_seen":"2026-05-27T18:55:48.408478Z","times_seen":27,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:26.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 16477\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6f122ee8fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-07-23T03:42:43.635096Z","times_seen":34705,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:26.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1311\r\ncf-ray: 9bd6f1244b285ebd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\nx-served-by: cache-fra-etou8220168-FRA, cache-vie6371-VIE\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2123570\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CAkP8hlxlKw9e3xZ6YD9UMkBdTp%2FqMnitdhWKi0y79XXHTWnCJAFQCbbfWkSAlqFiZvsBWle0fGw230jNQQoWiD%2BHcKaOgL1p6pAlvfnJ3dYZeGamQk3aFzHiG7V118zIXU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-07-22T22:32:03.430016Z","times_seen":20581,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28237\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9bd6f1121f5a7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-23T03:51:41.787691Z","times_seen":91220,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/64ec138921b19a39.png","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/64ec138921b19a39.png HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 20499\r\npriority: u=4,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CK%2FAjavrupEIAxgmBWpOKEpCbErQU0rQVRo%2BGKtAR25pyjnNxKWcRhM1maqhTSe5n4Lpxp5I88yoxCGF2c1962c8TKVT4BGtZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f11e9eb1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 52, 8-bit/color RGBA, non-interlaced","md5":"8d1bb824697cae4634a792b9d2b83846","sha1":"13ec1a52d756ec8573af8a3415e2404f17cd1196","sha256":"fb1f66a2097350462c906f610b4578dfd1d3af85c49f069ce40b244578e807e3","sha512":"97626f3d5be1abc661d3573235a78b8348b4249f2f9f8af385b940f490e26a07e4d7482015eae78c2107dc18d8d770f9dede1b8854a7a86e2556a07f28c4e9ed","ssdeep":"384:PBYUaZKZO/AU/5hXD2jWhi6RKWJZCUsY2xYqFnAIMArKS6LDK:5JO/AUvAjGK+AUArqfK","tlshash":"1e92e1b893434a550ccbab5ced624350f797fb96cc1d98fa8fbaee9d40d1a400505134","first_seen":"2026-01-13T01:22:59.349948Z","last_seen":"2026-03-30T22:46:03.611211Z","times_seen":6,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/6841f032218125fc.woff2","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/6841f032218125fc.woff2 HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/assets/26f3f9a2209ea95e.css\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105924\r\npriority: u=4,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKDKwb7hMIUj4HNDy0mrYDA6jZmAdJfjPDS%2FLhaATI5YC%2FGbWID5ddPTWPDOGKskD177d%2B2ZE2t9jdXMohM1%2BQFslNokWly%2Fog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f11f5eea120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105924, version 1.0","md5":"75db5319e7e87c587019a5df08d7272c","sha1":"92b30527304b5dc80f45e997e0b1ac4c70110a18","sha256":"1b498b959e5b7decbf9185803591d25bc1fbf83e798372ed30d32d5c79d82ff6","sha512":"4e556d80b52ddbadddf9287f6cdaef0d12113d0fa4a07728fd67767b97806eba5fa0f82711f71e76ee2875192d7618a9b6c277ceb6d69a30f76ca8e3ebb74aa1","ssdeep":"3072:7Jk35GDAni+UzuVEjLH8MSP02J5E4ZjJffp:7ys0iIEjz8MNGRfp","tlshash":"3ca312f46132150feebafcb00b9354415488ea21d39746ebeb74a5a3644dcdb8ea06c3","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-23T03:22:09.864279Z","times_seen":10762,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:26.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 39460\r\ncf-ray: 9bd6f1227a97783d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230085-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2045295\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=50hocXNuvDbm4uge%2FMGz00Hor%2FkMHxCVDZU%2FR8wQxMr2gxaJrNlKHgK6nbmzmmak97Wq6JoKOW7GMYm6KWRRLEf2Y9wcQMHodV%2BcwFte%2FUvWTxrWDRRZfiDXExo8%2FC1k6RQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"3ebdfd5d06617d7d3cf6bf6e5c458085","sha1":"ac433f0c7c8c06dbb26a85d08a47eadcf30d783e","sha256":"a642ac8ca5dc75fc2fa88c4c1d54b6f57f2a27bac6a74e15a5667e78f2af8e0b","sha512":"7ea52d1e4cfb1b61b84f58790fe6e1649d22b1b4b854e45df4b7ecb1b30a6b4e2f6366c794c51f5ce605f8ed0e85f0577dcb7d0a250d3b4a7182c3639edae402","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifirh3dfEm+E5ove:Q/drlyogMVc6FIKV+ZhdfEm+ET","tlshash":"ab646f7d86506deee994902d86db3b4af9883c0493ed1276f66441cb37ba43a33487dc","first_seen":"2025-09-10T06:37:47.236235Z","last_seen":"2026-06-07T08:03:01.010717Z","times_seen":6744,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":16,"receive":3,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/favicon.ico","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OW4db3Jx37wXOZ69kD9d%2FXnM2WSAJKCzKHf9CK6OOfRfnSUaEw%2B5rscrlHnCvyoKaQU7DW%2Bh3xD6othRH%2FYyvy%2BH0N909%2FBxXA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f10daae4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T04:26:11.038784Z","times_seen":543037,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1197c5656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-07-23T03:51:41.751118Z","times_seen":40640,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/api/transactions","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:35.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /api/transactions HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Basic Y29yZTpjb3Jl\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nexpires: Tue, 13 Jan 2026 18:26:34 GMT\r\ncache-control: no-cache\r\nx-cache: EXPIRED\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROmm2x4v9QOI87aRVvGjS0paQ7m9%2BRvZ85j121OrL%2BtUMzCt7nHSJTAUMgj5Dj0%2FiGHiuJuQ20UJfmN4tvm0WpAnRwVoT%2FbIsw%3D%3D\"}]}\r\ncf-ray: 9bd6f15cc957120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2728,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6969e4801fbabe158c4dd03bfd8b6821","sha1":"9acf83aeb54bbe5a4cc0ae446b4a054b2aacefd3","sha256":"d5bc6d18c17e5ce7bca733b563e85f112cfa5057722d78fbf9bf2cf67e9c832e","sha512":"4a31d8995f5e800c35498025e38463384b11e40a659bd5300e8078f7d8f0160efd90ffd82c7431d890a8f193cbebb6a0e7f8be77f95a9b96e3695ac5ce94e05f","ssdeep":"","tlshash":"4d513269aed3c416c1969fcfbd724ecd9f8123c9006e484a4dc3e84a79e0a22c51f571","first_seen":"2026-01-13T18:27:09.571135Z","last_seen":"2026-01-13T18:27:09.571135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T18:26:21.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:22 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6rxyqFe9O4ep3FcmRCIZS4hU4%2FpqxTBd9NDqHykbkg74XJDrI0NGmKydKQ23vjj5QrC%2BWG3jCwKkfr2%2BQIHPHJHWPR2hKZvcw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f1073a02120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1843,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1843), with no line terminators","md5":"475ccfa53f70c6be763bbbc4e56830fa","sha1":"36699e2b980f9b3414ae4cd01d672a972e23d330","sha256":"d9741a7a30ae8ef13e03f9085600f875723ada124dbb749dd2ee6b10520d756b","sha512":"e9b91ee8f82031d11eff494483fec7ff58b399804140d8507090b3248ea0d6b2ac3b56fa418d037436af944eb691a14d822c80912849142dd8bae28facfa1c75","ssdeep":"","tlshash":"023153797e11d538da84008b207ee7ed3d325162ba03d045c1ecc8268918fdb1c9fdae","first_seen":"2026-01-13T18:27:09.573282Z","last_seen":"2026-01-13T18:27:09.573282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69651b627304bb197d094a12/1jepf5udi","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /69651b627304bb197d094a12/1jepf5udi HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69525090bcf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9bd6f10edc287129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"77051d00b3c0f63362a86c83e0ac87e7","sha1":"cbfd27a97a7f85a930c2090dab7befbcf3cb01b0","sha256":"79f583eb2868a14c04181dd38adc40b3fc52add7e88a921f996ecec611b06075","sha512":"d52f49c9e5f4991d2930ef92df97c9811bff7484481b8b41f5514a83213865debf0ac0fb95cfc61f43fbb92e6bc23fc2de221ea2c170e068a1bb12be4fafb927","ssdeep":"","tlshash":"be41bfd26f9f1866936510dc0cfefe0e747721fa49986c9247080c517a666ad2f8ed28","first_seen":"2026-01-13T01:22:59.354679Z","last_seen":"2026-01-13T18:27:09.57518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":17,"dns":4,"connect":1,"send":0,"wait":476,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krxrp.com/\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"586d518585b166811a617b7f5060f71e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28236\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1137c15b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"586d518585b166811a617b7f5060f71e","sha1":"6ea81179776e5977ac49304b176923e61409393e","sha256":"2cc3a63ae0b79ab96b21a927c9f9a192ff287e877df5e54ee0b0dbe33debb900","sha512":"df7a3a88b5effe5f52c27897e20995a32973ae1b34aa260e42286833c68838afd61fcd0d4cc057ed5d8c941280e2e5167cdf394add607763363bdc96f4a099ac","ssdeep":"192:ImwHJ/LrnzPLEgVE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:sxLrnzXE1iN+xkDOy+Hp8/5Avy","tlshash":"18224369ce504ea702c29646399f35437624829b1f54382eb78891ac0f8ed6f71f77ce","first_seen":"2025-07-18T03:22:00.530906Z","last_seen":"2026-06-13T18:18:43.529078Z","times_seen":30250,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://krxrp.com/\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-64hk\r\naccess-control-allow-origin: https://krxrp.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9bd6f113ac1cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/bbf33976d8c7f31d.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/bbf33976d8c7f31d.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XExZUPD0LgbMtuB9vldqubpFJL27FUS4E6VcL3f5DBCFFcwkfLukwJFgnRWugmX4smvaSw9KBD1HfbdVx3Tdz02b%2FIWPUaiuIg%3D%3D\"}]}\r\ncf-ray: 9bd6f11e9eb7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3555,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71cf954e58da89bd24d612b6e6df65f2","sha1":"f75d44ef3d977b5b1c4ca964b590a4f717dad7fc","sha256":"540993abd5199258d8e0fe213167eb27da624201b8283aab35deabb0662996ee","sha512":"1fb27be88ecf79316099365fbee203fa7e451fdbccfd412b691918ca8fe984fcc71e8b5bb6d92940d6463c9a7fe1ca20b4e18a15f6c726c239913b15e7e06bfe","ssdeep":"","tlshash":"f571b9fd9285e6c8fa6aeffb5d257ac434462cf63cf3c2e4c1679846582015e4c4c8a8","first_seen":"2026-01-13T01:22:59.383944Z","last_seen":"2026-03-30T22:46:03.609355Z","times_seen":6,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/34bf3cad5bbd6648.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/34bf3cad5bbd6648.js HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XtZ0zVmHioe63799LEAbV%2BHa27ylMevMN3OEf1S6z1ihVRcsjvOeXGe0KWDd4wnjaO8yRu3db3uAcvTwTRrlEzNncKdxwXbdSg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:22 GMT\r\nx-cache: MISS\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f10c4aaf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310528,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35756)","md5":"cdb3775e7728004a49268e1c88ba74d0","sha1":"4320eeaaa633227188e5897151f1ec26ceedeffd","sha256":"191ba4211e108d8376bd720b8a1fa551d6cb09e9bd557e3fffbb7c5a1bfc0b72","sha512":"1d27224c8e71808f0e9c5400e6094106659f9388f21568c3f32655a2acaa8e04a22eedad6c6b51cdf1f5528f448e695d27f443d1c6426e9d6d07bd8a72fb678d","ssdeep":"6144:KQftPoUrIgMo6crPc99cb/5FQOYnz5lD9PrFAI:KQfZXR6crPc99KFQOkD9uI","tlshash":"e86418e931d6b02243a659f1507b000bf23d2965340d89a8f1acdddb3d7a85992bbf6c","first_seen":"2026-01-13T18:27:09.517809Z","last_seen":"2026-01-13T18:27:09.517809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":308,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Dec 2025 09:58:35 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326422\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f11a6c7956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-07-23T03:42:43.618406Z","times_seen":37639,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2115813\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f11abc7f56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-07-23T03:42:43.597562Z","times_seen":38699,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://krxrp.com/\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-3b0t\r\naccess-control-allow-origin: https://krxrp.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9bd6f11d5cae56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/coins/3cedd2bf22772f6e.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/coins/3cedd2bf22772f6e.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3rGfb802T8JLoN56mYqsWhyA%2FztenLiDoSgMP7MPh6Q12rxqwvTj2FFvPjXOZKbJ%2F7AsNEEmpdRYcbHH1o1IPv%2BW5uAw%2B5koQ%3D%3D\"}]}\r\ncf-ray: 9bd6f1204f1b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1bc01539433112b8258c192aa91baed","sha1":"e26e03f2eba1260c26575bc564c5be8c15ca3aed","sha256":"dd9daf5c8a5ef27b54f2b7ae0094ee0d90d10a5b9f95625d87ce03d99f149c95","sha512":"dd5f467b04b656f88a0234d5ef6213da02a6fddaf0b36e7d346ae7d0fb8f292912051076681d670b912693c42ce0d6fb1b90556dd76b6080a61b3647bc1cf2b4","ssdeep":"","tlshash":"5931429292e6b3bcd109d370912ebc393dd65cf53604c12d06c95692a63249e48efcc7","first_seen":"2024-08-20T09:13:27.28154Z","last_seen":"2026-05-27T18:55:48.392208Z","times_seen":26,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krxrp.com/\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28236\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1137c14b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1196c5356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"fd334ca02da729de662d9c4f3a3c1b08\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326423\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1197c5556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10989), with no line terminators","md5":"fd334ca02da729de662d9c4f3a3c1b08","sha1":"c4d597fc0b45c88349c9386a1dcd9b743d546d7f","sha256":"ca0743a74dc010d603d8b170fbe2a9df6a0540db8ad2338bac2c26d52a885052","sha512":"df2f6995fef3a464e3105ef05560f3cbab5a2eb6928f878e5c3926fc7682fd5f0e662e5ac1d01628aa7d5c327157c1e9eff0abb9d948f6caab1eb3591a047c2c","ssdeep":"192:kHNM+/RIU9HkC40V2tl+f9lVo7QYcb26o5A8f6uYZvUZaUZSPgM:G/b9HkCreHA87YZHh","tlshash":"fa32d7c6f9c7b9624227524841efa218f73f2a947706dc18f06899f30a948c75077bbe","first_seen":"2025-12-29T13:02:03.629914Z","last_seen":"2026-01-16T01:10:38.090265Z","times_seen":1458,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"573176a5696bc8177ef9cd22d0314c04\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1199c5e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"573176a5696bc8177ef9cd22d0314c04","sha1":"d2df89ca54fab39b53d35912867df378a296d4f7","sha256":"63ec3e8ad1852f45903471a3c14e92bc8c52d642add091aef6566c845d79ec17","sha512":"0dd9982a020f84f23ffe6a1882d276b587e39d0b9378f0b7f2208d441a0827fac1d819fb315747cd4c7a938fdd066045375c4a57e854f84a265c069635958586","ssdeep":"96:zNC9Hqt7pEma7hY/rcK3JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYxLRIvgx43nVY","tlshash":"08b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66565f218784cba077b39","first_seen":"2025-12-29T13:02:03.575644Z","last_seen":"2026-01-16T01:10:38.060616Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/f40d0eb0aa47b2c4.svg","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/f40d0eb0aa47b2c4.svg HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2qeQbulxV3jciRiyepyLK3neA34rdbJO1vLvha6LnSrd%2FqujGUPKnqNOz54YlE3XKjIUvYsaMW3hDdcpYv30AcdNc%2FilxTgyg%3D%3D\"}]}\r\ncf-ray: 9bd6f11e8ead120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56896c1382e5198e7a0677566cd01937","sha1":"b0859f04f5bf7a22a42ea49db84f2104ced05cdd","sha256":"a0b72252c552506bd501c80fb50458e1eff2bba9b203ebbc924a776782cf67ea","sha512":"596d1bd82e8d9475e1c1912dc470a654b5711f02781b3706ea1fcc0b3e897f4d3d55fbf78b4de0f214bce1c69a6fd0bf8429c0242a65181c2528d0aad8032016","ssdeep":"192:0XfSW5U6T/BbyXb9eIOhQ9BcZCYa3HAB4/Jrjqqg:ch5Ua/Bb8bJOh0qTa3HAB4/JrjqB","tlshash":"1a02d6ee17a499f4f245e3d4eb2694a5734e507b7ba2c35c875f1c2aa01285c888fcd1","first_seen":"2026-01-13T01:22:59.365245Z","last_seen":"2026-03-30T22:46:03.586432Z","times_seen":6,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T18:26:22.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pM1heSEmpQSSrvteiCzefhxhc5P45bdjk%2BIYz8Mlhh2rXzjaaHS9%2FqxDO62yTFXQ5NJGtxuqkBH71NGdwH%2BO0kfv1iun4X0R5Q%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nset-cookie: version=a6efc3d8; Path=/; Secure; SameSite=Lax\r\nexpires: Tue, 13 Jan 2026 18:26:21 GMT\r\ncache-control: no-cache\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f109aa55120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (393)","md5":"3858bd8444554bb921f60db4a31737b4","sha1":"dde70f87268d0b3c7b9435e21bc0f8b99dd8e583","sha256":"21a714e6991fac8fa7161adcb8a2db8ab62adc7135109825065d3aa242a7f77e","sha512":"612d52045b9329f04672568fb528cf62fd589bacfd162ec979a5bfb74ab396922a7d687f063dd028fe92e81b618f8ee7eacbc02160fa4f1e11eb2de3f876bbff","ssdeep":"","tlshash":"3c1161193ca1dc219200069268e1f54c74d7b236934ad841fadfc48e9f04fcecc8b96c","first_seen":"2026-01-13T18:27:09.593643Z","last_seen":"2026-01-13T18:27:09.593643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krxrp.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 171\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":171,"data":"{\"p\":\"69651b627304bb197d094a12\",\"w\":\"1jepf5udi\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://krxrp.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"8RodihZ7YecDXdYbvHOT6\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-zqss\r\naccess-control-allow-origin: https://krxrp.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9bd6f114ac3cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"89acb11bb4b50909139a93d5edd4ad5b","sha1":"8948b244d7bd159290ff38ea2d842281eba47e67","sha256":"d1419beabf5a4952b0c5cdcfff852cde3d3632da7bf89f2654f75c16e97caf41","sha512":"3e1a1133c69b38cd28c4e51283778a15854969ab90501b0814282f781322f12b6afb53d628f71a5adab1627e3b1ea6d708e5f8e7573b3751a31fb71d7799a7b2","ssdeep":"","tlshash":"8911752e0b4f2f6a7b653f0618937c45218ce3d53a48442de4d38d4835d43bd10035a7","first_seen":"2026-01-13T18:27:09.596695Z","last_seen":"2026-01-13T18:27:09.596695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Dec 2025 09:58:35 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326423\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f11a8c7e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-07-23T03:42:43.576733Z","times_seen":37811,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Dec 2025 09:58:35 GMT\r\netag: W/\"a35b82146e32cd2ec43b3eb8a4926580\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f11abc8056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100291,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a35b82146e32cd2ec43b3eb8a4926580","sha1":"3a63c7d642cd8906a52f6c3079ef6a4bb02e13d8","sha256":"4faf1e149eef70dc39b511ff58f489525c8f64e206ae008273978a9bc412647a","sha512":"c0265c5788ef8f93a93a3cf69dd66493f647fd84ccbf693817fefc0c7b64b26d2282574890787fb9a3cc0541ffd0e6fbbbe9e03308cf04483b801445b4338235","ssdeep":"1536:f/Uifm7kUdwddCri3iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:jauVLmi0V0d+tKaK","tlshash":"e6a399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2025-12-19T07:47:26.371188Z","last_seen":"2026-01-16T01:10:38.050486Z","times_seen":2700,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krxrp.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":94,"data":"{\"logData\":\"{\\\"socket\\\":616,\\\"register\\\":0,\\\"widget\\\":2345,\\\"script\\\":1655,\\\"download\\\":690}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-3b0t\r\naccess-control-allow-origin: https://krxrp.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9bd6f1203cdc56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28236\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1121f477129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-07-23T03:51:41.756113Z","times_seen":64700,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"91fa452cb811ebfd42913ed7aea74006\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28237\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1121f567129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"91fa452cb811ebfd42913ed7aea74006","sha1":"060bc71fe2e4a1f9c98df43b6aba2b2687e12d90","sha256":"624283bdfab2d0b2de4ed2d5e1c443fc4ee513b426345414e625a8d69a058674","sha512":"c8a8fe4bf2b22533178ec9c9be10d7ea9983058b49b5c540bc481621df9e1dafd257e753546e4ce3ac231caae0f86e2e05fc4a3088b78e369607031b07d289f0","ssdeep":"","tlshash":"5441b5d936e4f9ba834328e1043fa016b6353836487be8c0531dd8f5bc38c45811afb2","first_seen":"2025-12-29T13:02:03.646562Z","last_seen":"2026-06-13T18:18:43.504645Z","times_seen":3819,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/storage/templates/vaspc9b7dw27s79j/032ca0c066fbce52.png","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /storage/templates/vaspc9b7dw27s79j/032ca0c066fbce52.png HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2221\r\npriority: u=6,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:23 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5ivUnwV%2BYDjCIXFJV3zTPTPFzeYP%2BnjIk2Qis%2BOwNtYY1L2j6BEo2MBOdFdJPdP7mkRGQlM1%2BU6V86%2B9%2FBLT2vMWQBzxCOS6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f1125c01120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"39f38363e932dfcd478332c7adea0b65","sha1":"df596d6d2fbcccb84c969344d341f79ee9b359d2","sha256":"9406115d867acb97a363217de9aab3b4216aedc8a4a1241b5284e724c53e82c6","sha512":"9d4614ce7931b77ed42c4505e8e78a84ac78d3da0201294c81ba0bfd155c2d4880baa69e4b3fda03743bf3e1182993e619fa1d0f1cdb176e395b9c92f18d1181","ssdeep":"","tlshash":"dd4129c1260205ee447689c9e1fc61fb803290d2863ac6ea2871067b1cecdb3f4e47ca","first_seen":"2026-01-13T01:22:59.36115Z","last_seen":"2026-03-30T22:46:03.62177Z","times_seen":4,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/api/transactions","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /api/transactions HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Basic Y29yZTpjb3Jl\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nexpires: Tue, 13 Jan 2026 18:26:25 GMT\r\ncache-control: no-cache\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivO%2FrAacrlnbG6R96nnmVMXx1csEfye6hiXgEPjJqiW8h7WuSwTmcHz7%2FgZ6CQn0Arf0ezW8ocfpb%2Bd6JwQoHJxZLHPMpMlx5g%3D%3D\"}]}\r\ncf-ray: 9bd6f11f3ee4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2715,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a3003c3d03f1615d736ebdd0b32038c","sha1":"db3dd029b7f5c767eb6eb02df8a439b6863fb5b2","sha256":"7764934463232f1683a6217054d9a4d409fd0e605dba90472760fc0b10094c6c","sha512":"22ad73baf1bcaeca3ded93fd289ac099961b72ec3b4a79098e1600845e3ea5bc00ff7f651b329410829e5b4a8921c4e2d4cc986caf0db847398f8bba7f46278e","ssdeep":"","tlshash":"9e513f58aed68426c2876bdffcb10dcd5f8623cc055a45c94c87e88b59d0b21c51b5b0","first_seen":"2026-01-13T18:27:09.606352Z","last_seen":"2026-01-13T18:27:09.606352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T18:26:21.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 13 Jan 2026 18:26:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPpO10mHckP3GyrCGpk1V3C6QkHNs73PRYah1CratugtS17qOQgf9jYhgZuyrKAy3oetjgg5MQl6QFwyA5AiRLwow2C1gWbPpg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bd6f105fc6fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1843,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1843), with no line terminators","md5":"9de2d313363c806f6d5feb2237d19be5","sha1":"ba3b5ee6181d94a017f38c500d95788ee3af413c","sha256":"e0c36319706dcedd9c915ac1fa48dcbc2893644e44be8f9afd966e8b793737f8","sha512":"352e16e99590d0042b2614cadb42bb96d2c79715b169de61c47918055d923ba1e25dfb3e74e3ac169c53966a1e3a3748b1847e52c8efbd02d8fd33682c13142b","ssdeep":"","tlshash":"dc3122797d15e6359ac00096117ee7ad39315212b602c485c1ecdc269e14fda4c9fe6e","first_seen":"2026-01-13T18:27:09.607912Z","last_seen":"2026-01-13T18:27:09.607912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":88,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 13 Jan 2026 18:26:22 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9bd6f1089a21120a-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MJ2OGUohRYA5xM2XiDTn%2ByEMlueVzOVxsTR6Op6bM3kre9SXgbsZr%2Bsx3jnRgI%2FOBhgIdK8TNspM6TojqigkIhWbAkPs5JZcW2Uc41VSPvrT3VJMXFFg3sr3Mj0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2286\u0026min_rtt=751\u0026rtt_var=1787\u0026sent=22\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=9915\u0026recv_bytes=2190\u0026delivery_rate=3452581\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=21532\u0026unsent_bytes=0\u0026cid=a96477a5c5ccd004\u0026ts=340\u0026inflight_dur=30\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10580,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1199c5956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-07-23T03:51:41.789286Z","times_seen":48249,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1199c5b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js?","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js? HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xiK8tz4yCJBLUTXNzoRTB1Nj0RC9kVcrNMFlxv0VrLAsd579P1GK1RKI58dFujKPyCWm4V2Nflsc0%2FRm1POH3XEPELc2OBGCg5T5ktUZXpTa6ITOp2HNkHglAqg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f108ca2c120a-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2173\u0026min_rtt=751\u0026rtt_var=1567\u0026sent=24\u0026recv=17\u0026lost=0\u0026retrans=0\u0026sent_bytes=10678\u0026recv_bytes=2458\u0026delivery_rate=3452581\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=22269\u0026unsent_bytes=0\u0026cid=a96477a5c5ccd004\u0026ts=370\u0026inflight_dur=52\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10580,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"d77a9c838d24431708203ea18f5a5dc8","sha1":"b6f094cba46d5ce5b713f83d2fea467e5eea8120","sha256":"3f0c5eaa10c8d7bb751b487b54ce1c59bc39dd6ec2db5acec99272af7a4d1ddf","sha512":"971db498c52511317d34341a0af0d24676499180cfc244a82a2ecf921b3a21aaf0995693e0682f1c6bc7787a1336980e3fb7edaea1be07660386f093fba4fff6","ssdeep":"192:ExL3EqzMHvTF48FDAHnl6bWkKO6n0U2ZKNdB9JjlT6+1l:ExLUqwHvTF4EDSn4KkKBn0UUKNP936kl","tlshash":"b022c78b7e497195c3a128f11c5336cd202a7f99c03c5c6a9309c9a57f687da24eaf0d","first_seen":"2026-01-13T18:27:09.61079Z","last_seen":"2026-01-13T18:51:56.655924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28237\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9bd6f1121f407129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-23T03:51:41.766232Z","times_seen":91193,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:24.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"872f914720cfc7b657f405012ea10c8a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1326437\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1196c5456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"872f914720cfc7b657f405012ea10c8a","sha1":"1bf2386624138057451b1bdd97311e9ce1e7d0ae","sha256":"1a9ec11e322de9a2af57eeffaa69f67b49556972fade1dff81f46664427aeb63","sha512":"5cc6f30901cbb79151b79139f3a8b4e83c7a1b9e170447b4c49d177b1edc77706785552ba2b071c5bd69d95a224a4482f8b6ec7765aa25423ff42a798ec56c99","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCwGN//h6LiJq:SzP2DaSLi8","tlshash":"61822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2025-12-29T13:02:03.603079Z","last_seen":"2026-01-16T01:10:38.088072Z","times_seen":1977,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:22.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 13 Jan 2026 19:14:22 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvSSuoFGTwtTGahrmJletGsV0oXVMawcxYj6ZB9uzMuRdmg0CQbPpeovSQmEgibn4d%2F1%2BgTHSpCHY95Rn88fGe6aKEdkuGRRBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:22 GMT\r\ncf-ray: 9bd6f10aca8a120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-23T04:25:46.180195Z","times_seen":121841,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:23.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69525090bcf/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://krxrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:26:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 09:58:36 GMT\r\netag: W/\"890a2ff1f0bf72e7b248d102ff79740e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28236\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9bd6f1121f4a7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"890a2ff1f0bf72e7b248d102ff79740e","sha1":"201364499dd1839b7b4c491d89a865cc237063e3","sha256":"ef4ad578694c8fb01728aa2043d57113ce46d562939dad05ae75c172f4c1fb35","sha512":"15211872fb2591548ace05e32ff371957157a3a6f21e980e4f66161755aba29d1f23e53f9794ddc9c098d3e5c19895127f486114cff559ce641ee58298569721","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOQcErQYIMPdLMz9o115:kyWFW1W+fM4f8kBLMz9215","tlshash":"c234c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2025-12-29T13:02:03.600994Z","last_seen":"2026-06-13T18:18:43.537665Z","times_seen":3819,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krxrp.com/assets/37ef9c7b60d312cb.png","fqdn":"krxrp.com","domain":"krxrp.com","tld":"com"},"ip":{"addr":"172.67.193.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krxrp.com/","date":"2026-01-13T18:26:25.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krxrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:40:24 GMT","end":"Wed, 01 Apr 2026 00:37:01 GMT"},"fingerprint":{"sha1":"F4:F4:07:10:7E:BB:43:23:5E:19:43:6F:C6:F2:87:FC:7F:F7:1F:4D","sha256":"24:71:CF:5B:75:ED:9B:DA:70:F0:E2:D9:D5:D9:AF:0D:94:85:E2:57:30:D3:CF:F6:B8:02:48:24:87:B7:E3:21"}}},"request":{"raw":"GET /assets/37ef9c7b60d312cb.png HTTP/1.1\r\nHost: krxrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krxrp.com/\r\nCookie: deviceId=897647675c284fd2bd82843d1e3a1ee9; cf_clearance=O0dkENUKd3dvtQHz32JQ.e9I5OTpIaGahc9BpnIs4mc-1768328782-1.2.1.1-Y5Q0YkC5Kw9tF.TFA5ZCrAJOIK2vyGYof.DwGs1eXEZFgCU.0HNeLnWXNQQ.pGq9Qj4ce5pXbNSoYN4Q0JTrOBA3R5rG8_zxCNLIWapy8aVoHjMVwZxEOve.JxxTHvUE0Njl03Dvyv634JtjHl_364xmP4BatV_LwOdbRDp8vE3y5RPLZx1rbS7he3uf_DksGbO7CYZhvxRCq.yZI08eeSt4h.RqGK3AvVIdLhtEvKc; version=a6efc3d8; TawkConnectionTime=0; twk_idm_key=8RodihZ7YecDXdYbvHOT6; twk_uuid_69651b627304bb197d094a12=%7B%22uuid%22%3A%221.PUvhBerPiMZgUfh2CHpli0ve7SB8qofQJKcAcPLxa2QYG4LMZzeC1ohr7QXhem8PUxHz2kQQk0qIK4xZnWCsiVh7axK73JZnnzxvi67OkEvgdpn2X%22%2C%22version%22%3A3%2C%22domain%22%3A%22krxrp.com%22%2C%22ts%22%3A1768328784856%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 400247\r\npriority: u=4,i=?0\r\ncache-control: max-age=3600\r\nexpires: Tue, 13 Jan 2026 19:26:25 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PboWMWa3iP5Xm2n8tTBhp%2FIBhnHuSk25kJHpubkVRZg7Yco%2BTDu%2BhsQL3h617Y56btwBKCC07hB35SkYYZSvg4%2BZvHyFb4Alww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd6f11e9eb3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 628 x 465, 8-bit/color RGBA, non-interlaced","md5":"b0d8bda55d2a22c4277555b7d5965bb2","sha1":"882eb75bee17e2c45093df14ef414670cdcde553","sha256":"c5b1bec9255a357637fef17b0a251a2ccfbebdbe48e40e3fe390758e8c8b8bfb","sha512":"5b7d05f1a923282e878b8696c69cd47755cca4f4f3f95316d7dc9a99dea9ab52272718a8a61bd426b5157766ebedabc7ea35b799ef1f342842629022eddbdd81","ssdeep":"12288:LNa1/jqEcEwNZW/n47pUPRZUIJLo6u0IRBB:A/rNVn47+ZZUIturBB","tlshash":"708423477733d99966b804b050c8d4e53bc6d40aaa1361ac40e6a309aed7dbbffdb443","first_seen":"2026-01-13T01:22:59.379283Z","last_seen":"2026-03-30T22:46:03.572832Z","times_seen":6,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"krxrp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}