{"report_id":"66d47151-0001-45a9-874a-b533c0006e66","version":6,"status":"done","tags":[],"date":"2026-03-04T13:38:53Z","url":{"schema":"http","addr":"krakengtm.tech","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"krakengtm.tech/","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"title":"Kraken GTM Capability Assessment","dom":{"size":20672,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14767)","md5":"396bbf5b720dcd4c15eb2b10d3a4ef92","sha1":"560e93ebb4cd62f3b704c371f0b05fc173ab6c9e","sha256":"1a69077ed219969d998aec1eaaeac9067efc01472c9f04e416cd98811441bd7f","sha512":"2ae492ecb9d045f994da7c4d4d48c0ef0ca3790e8e5b47a02e0f23c5ce0439de64bb18be230a36d684bda11616c7f6bb51514988bc08cfd6c5e105a40d58674e","ssdeep":"384:Kf4vCkAO8U5Q6nBOmEAUU/cxksc64Jysq7vG+nEM0:NMsnB7cxksc64Jysq7vGM0","tlshash":"2d929540b40c1278ad2faa65eec4973ca025b402eee34566b10d148ae6d3ff535feb95","dom_hash":"domhashd56b57ed738dfc81994ad1de2912aaa1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakengtm.tech","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:38:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"krakengtm.tech","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-02-19","domain_rank":0,"first_seen":"2026-03-04T13:38:54.53485Z","last_seen":"2026-03-04T13:38:54.53485Z","alert_count":18,"request_count":6,"received_data":1710536,"sent_data":2749,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakengtm.tech/~flock.js","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-08T21:02:25.606759Z","times_seen":10254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakengtm.tech/assets/index-98gq3KRL.js","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4591339b85828d799156869bce2cfc9","sha1":"63a9464ec025d81e44c42372fe0bd3170fd067ba","sha256":"52ce02d183bfa34c12cf4628d0cad4f401a1a549a1448556eac9f9ee49d4d33c","sha512":"c432812f062f47b97a58db96fb47de436c037a9091cc1745ce6f5388bc15ff8b0b22af28d9e78b77654fdb4ca6f787ce1f886e21810696fe54f4f819a7ac5dda","ssdeep":"49152:NAk+cMBmqxPTXMnLlD9EQtWH/rXeq4Tw3kqm:lhUrUB","tlshash":"9d756cc472a5b066839385f0407f010bf2396915684ec468f27ddcea7db498aa27bf7d","size":1591785,"data":"","first_seen":"2026-03-04T13:38:58.79373Z","last_seen":"2026-03-04T14:51:48.530038Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krakengtm.tech/~api/analytics","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakengtm.tech/","date":"2026-03-04T13:38:32.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakengtm.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 12:26:29 GMT","end":"Wed, 20 May 2026 12:26:28 GMT"},"fingerprint":{"sha1":"28:40:F0:65:CE:42:12:F5:7B:B2:CB:FF:D3:E9:32:17:B5:4B:87:2C","sha256":"30:38:5D:7B:C5:EF:13:9B:36:37:55:04:10:DD:47:A5:33:96:27:0F:D4:8E:82:33:9B:83:AD:F2:2D:B0:15:65"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: krakengtm.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakengtm.tech/\r\nContent-Type: application/json\r\nContent-Length: 335\r\nOrigin: https://krakengtm.tech\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=b8735e49-7e14-4e3d-9f69-02e87b11d929\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":335,"data":"{\"timestamp\":\"2026-03-04T13:38:32.753Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"b8735e49-7e14-4e3d-9f69-02e87b11d929\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://krakengtm.tech/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:38:33 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=QHuZ_y.DJF4jSIQaeEAOabDEyIQ5EREw10poj838.5o-1772631512.7591858-1.0.1.1-hTeWmpC4mo0G9IAGu0TM6HE2Yl_Mp51Fae0cukww3hRSonjq9NgLIu1XjhnnDctaUZUHavE4k74DoOnusPyS.4D55_bMnv47i1FV6gwaAOJlvxHAFXxtcIZ6wKZwfcSh; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 04 Mar 2026 14:08:33 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d71482ab8ff5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-08T21:02:25.611527Z","times_seen":10294,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakengtm.tech/","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:38:31.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakengtm.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 12:26:29 GMT","end":"Wed, 20 May 2026 12:26:28 GMT"},"fingerprint":{"sha1":"28:40:F0:65:CE:42:12:F5:7B:B2:CB:FF:D3:E9:32:17:B5:4B:87:2C","sha256":"30:38:5D:7B:C5:EF:13:9B:36:37:55:04:10:DD:47:A5:33:96:27:0F:D4:8E:82:33:9B:83:AD:F2:2D:B0:15:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakengtm.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:38:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=VrAL2y6XAZfjzk6jX6plsFtB7X__2HAoKQYQl4ziaqA-1772631511.2006211-1.0.1.1-5RQrYdBi_C8vpBJDUvcqw2JNn_NRhDBEpugyXcinYcexlIdrVYYiVfjhsDpES5Cg6bZx5n15IbLfbFbxIi4n5eFbwJIaDhK36UCwXHtdaOos.EyisKgoGGYFmm4yqV9N; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 04 Mar 2026 14:08:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"5e7f9e89c79baccc81cbbc03bf605cbc\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d714820f98b5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09f05a72174c30451a633a94184a886b","sha1":"4026de0d71524c91d4744c860d85dee069511754","sha256":"e60e2a8e9b7e462353e7ffd22b076cf45689d29f1dbb97b25e42a90ab4a43a78","sha512":"2fc98a2d14fb23660d0fb116136e9ee69b2e6070c5bbbf9dc8023217921a6c0b5643a397dbacc858be360b5de0092b49d38a4a32a5442285af39651931ed7ede","ssdeep":"","tlshash":"fb3164e7a980b414c5b282f09ee8f440c8abd24fc148ad45f88ca19d0fcafc0c6fb214","first_seen":"2026-03-04T13:38:58.783145Z","last_seen":"2026-03-04T14:51:48.509276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":90,"dns":69,"connect":1,"send":0,"wait":396,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakengtm.tech/assets/index-98gq3KRL.js","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakengtm.tech/","date":"2026-03-04T13:38:31.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakengtm.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 12:26:29 GMT","end":"Wed, 20 May 2026 12:26:28 GMT"},"fingerprint":{"sha1":"28:40:F0:65:CE:42:12:F5:7B:B2:CB:FF:D3:E9:32:17:B5:4B:87:2C","sha256":"30:38:5D:7B:C5:EF:13:9B:36:37:55:04:10:DD:47:A5:33:96:27:0F:D4:8E:82:33:9B:83:AD:F2:2D:B0:15:65"}}},"request":{"raw":"GET /assets/index-98gq3KRL.js HTTP/1.1\r\nHost: krakengtm.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakengtm.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:38:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: __cf_bm=sUa8D0cXX7ylCtUicpirWQfjNdyzaPaNJSdhMVdBZk0-1772631511.754031-1.0.1.1-05TtL9nYTerg0AF282A6O.wHo11MMsGzS6VW8aVv1HYxQo3QEnB0EjQhwtd4gXbCDgVvMK9je7I7YGSc2AkdLwWYN2WGljiVkJgNO_tAWMiU4ONt32Qgukz_1iD.MjLA; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 04 Mar 2026 14:08:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"d4591339b85828d799156869bce2cfc9\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d7148247a275a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1591785,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"c3370a7567120ebd1561d10dd8303972","sha1":"8b905b2451144a2b028e2a29a318be0592c97763","sha256":"3d10570fd12e7adaba0c4ed5b12dc95cd16914eeec5e8be7fba6bd71b518606e","sha512":"14cd0bd371f5bbdafd637ce144e958591031ec7adbbc5f45220dac3ac8f42ca5dc9d8319c6828206ed7ea0e9076274dd9a6ff5a98beafc8e9cb0bbc98cfbf462","ssdeep":"24576:NAk+cMBmuZxPTXMnLlDSqEQtW/v/rGgxiez:NAk+cMBmqxPTXMnLlD9EQtWH/rXz","tlshash":"d5255bc872a6b466939391f1803f0507f3392815780d8464f27ddcea7eb490aa27bf79","first_seen":"2026-03-04T13:38:58.78552Z","last_seen":"2026-03-04T14:51:48.498595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakengtm.tech/assets/index-jm6Kw3Ih.css","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakengtm.tech/","date":"2026-03-04T13:38:31.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakengtm.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 12:26:29 GMT","end":"Wed, 20 May 2026 12:26:28 GMT"},"fingerprint":{"sha1":"28:40:F0:65:CE:42:12:F5:7B:B2:CB:FF:D3:E9:32:17:B5:4B:87:2C","sha256":"30:38:5D:7B:C5:EF:13:9B:36:37:55:04:10:DD:47:A5:33:96:27:0F:D4:8E:82:33:9B:83:AD:F2:2D:B0:15:65"}}},"request":{"raw":"GET /assets/index-jm6Kw3Ih.css HTTP/1.1\r\nHost: krakengtm.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakengtm.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:38:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nset-cookie: __cf_bm=eEd0xSRMwoEtG9YZMfYulj8jrWwsKagGEWxGS1LpjYM-1772631511.7549248-1.0.1.1-gDxIOt4b8tXx2qWO1uUZsePmwCc.F6qkk_MvGUmD2Qg_2C6zmbKUHJneR5OP2ZN1pJZ73q4Q3A5r22xGI9xaxd7VtaKu46dH8weF.j_DOe0mYRQipW_L4LKp68iO.ELY; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 04 Mar 2026 14:08:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"cbef3ebb38452472eae74f0dc6ff03a0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d7148247a2d5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65574,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cbef3ebb38452472eae74f0dc6ff03a0","sha1":"02db8e12dafe94587750c57ca9b543447b676d68","sha256":"c39826e7ec075ce3a2337ccedd9b52127b8762b93d7d481891e294186f38e6a8","sha512":"30544f6ee31a4e71b0b4d762ac1281283ffadb5aac9ad303658aff47361fcb0159cc00ddb3bdd179882648928f351ee13b47fc4c289de3fa7e528bfbad1cc9bc","ssdeep":"1536:zhMcRbUYqkUUEeaG/Cr378VQZkt5FNCovo:zhMcRbSkUUEeaG/Cr378VQZkt5Ffvo","tlshash":"1953951eb91d617e2c2790e883dcb9ec510af0c0de3b06b57e9b41216ac37f619b7558","first_seen":"2026-03-04T13:38:58.787555Z","last_seen":"2026-03-04T14:51:48.501659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakengtm.tech/~flock.js","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakengtm.tech/","date":"2026-03-04T13:38:31.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakengtm.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 12:26:29 GMT","end":"Wed, 20 May 2026 12:26:28 GMT"},"fingerprint":{"sha1":"28:40:F0:65:CE:42:12:F5:7B:B2:CB:FF:D3:E9:32:17:B5:4B:87:2C","sha256":"30:38:5D:7B:C5:EF:13:9B:36:37:55:04:10:DD:47:A5:33:96:27:0F:D4:8E:82:33:9B:83:AD:F2:2D:B0:15:65"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: krakengtm.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakengtm.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:38:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=3b6IvV59h1c5SR5_uPShmMyQ5vYZaLrc27S_WWaBkLI-1772631511.7556908-1.0.1.1-ASKDxeDd5XRiSYIHOUfk4rbGPEzkGjBZBSt_gqHCTlrPkc_BRuCxkuqxdrsBPsyEFiN_IvEq8NwdYxtZuRPnlSQ9Cydlzm1t1zUZavH.yLsGOo3wGA5Bsd8AzvpLWeX2; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 04 Mar 2026 14:08:31 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d7148247a345a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-08T21:02:25.606759Z","times_seen":10254,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakengtm.tech/favicon.ico","fqdn":"krakengtm.tech","domain":"krakengtm.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakengtm.tech/","date":"2026-03-04T13:38:32.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakengtm.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 12:26:29 GMT","end":"Wed, 20 May 2026 12:26:28 GMT"},"fingerprint":{"sha1":"28:40:F0:65:CE:42:12:F5:7B:B2:CB:FF:D3:E9:32:17:B5:4B:87:2C","sha256":"30:38:5D:7B:C5:EF:13:9B:36:37:55:04:10:DD:47:A5:33:96:27:0F:D4:8E:82:33:9B:83:AD:F2:2D:B0:15:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krakengtm.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakengtm.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:38:32 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nset-cookie: __cf_bm=.qUIMZJwZa4VYGwmcL4t9b3dd_uqqUvWXIq7ojYHF3g-1772631512.512139-1.0.1.1-eMXqwIXd6vWusHVAsCU2zcaCUM6PrSb3CWd8H05bNuL8DNSw_iDInFlmr7UaUyU9DPDQ4pAtb9ou8cBupMxNJSpGlsZ4EV1JKjL.R918AP9BckvGKj_9I0yvYgeMdps8; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 04 Mar 2026 14:08:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"81f5f27a94a5d78b17f99447fb8ee03e\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d714829393d5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26099,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"81f5f27a94a5d78b17f99447fb8ee03e","sha1":"748e39c762e6c9cafa8b33afb34bd51ee7bdb76f","sha256":"86b8c2d9daabe6d4ce5a11bd129e7b165e463ebfd1d4bcfcd7f86cb91ccb2076","sha512":"7c6fb1afa87b674c49db3db81ada6835f2aeeab632f7d57ab7f33b81acf253d717a0d7efed0c5c45769d08591c11c78a0f297748d4679f9601464d00b4359bcd","ssdeep":"768:ZMs6CtagC31c4/zKsTSaFBtOcOYukimSQOi2JCWkGZ:OaCq4/rTS4BtykimSvi2JJ","tlshash":"bcc2e19e193c9dec56b3c00b710d7808c1a3efeed7f06424a452ed5a846e45b3639ad5","first_seen":"2026-03-04T13:38:58.79073Z","last_seen":"2026-03-04T14:51:48.505261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"krakengtm.tech","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
