{"report_id":"6feef222-b3d7-401e-b3fd-49e48d83539f","version":0,"status":"done","tags":[],"date":"2026-09-08T20:27:56Z","url":{"schema":"https","addr":"kraken2trfqodidvlh.com/","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"title":"Kraken против всех маркетплейсов. Война и закрытие Hydra запустили агрессивный передел наркорынка в даркнет. Теперь реклама веществ на каждом шагу, а в пиаре маркетов участвуют RT и хакеры-патриоты — Новая газета Европа, вход на Кракен теперь стал очень простым","dom":{"size":69828,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3053)","md5":"228e3154f28817bf9cf14186161fb71a","sha1":"f3c5897323726da74dd8c82b0597b06c48d25476","sha256":"a0771612becb5166f3c462670c4ec3b18fedbb2de82f42b3fc26ec6aa82c8772","sha512":"b144f6fe03599bece0cc822ad56767d8e84a8a8330391500876477fc68379f40a5c4979724588e42553e3ef17ac1e1f8109ec7bdfbb207220edfc641229254ca","ssdeep":"1536:Y4qqaL843T404ho8oLadl/tBeE3HtfD7zJ6ov4WrinSUh3hXO4Mmr5+QdYhZSu1E:eeZtfD/9cXO4HrsRh1g4cJg36z","tlshash":"c9633f608689149e5206f457ed087e0d3cdb54ff3f9b961635bc2ebe3be2468862834d","dom_hash":"domhash3ef83bdbdb5c733651abcd679546725d","first_seen":"2026-09-08T19:52:00.615874Z","last_seen":"2026-09-08T20:27:57.744271Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T20:27:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kraken2trfqodidvlh.com","ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-01-13","domain_rank":6695897,"first_seen":"2026-02-12T09:47:36.819266Z","last_seen":"2026-09-08T19:52:00.207572Z","alert_count":74,"request_count":37,"received_data":440823,"sent_data":19471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b28cacc7ca7f9282e35bfa799de20c6","sha1":"4c007106ea378b161fc2e466ec4bb7dfb0398893","sha256":"4838b53c8c94e3279d4d7dea13036873c5b566297f9279ba2fc008fbab75ba0c","sha512":"793d82b9391f499df40828f1004ba48b594fae45fabdf878ee39c3f682b8cdebb971523894748af0660b2e3dc9ded2c0b6cd1267c646a91f8ecc617c62da16bb","ssdeep":"","tlshash":"fbf020a67c894034c36723a52b73a155343d382fb80ead51f50c18613f9896508ab55c","size":566,"data":"","first_seen":"2026-09-08T19:52:00.635726Z","last_seen":"2026-09-08T20:27:57.755686Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/css/st4.css","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.978Z","timestamp":1788899246978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/css/st4.css HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 19 Dec 2025 04:15:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6944d144-7f90\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32656,"size_decoded":8660,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (32648), with no line terminators","md5":"03e839a391f0818fa04e0630976fab30","sha1":"ee6470b5d16718121c03ef3df56f0fbdc2e3a756","sha256":"84ab71153fc787931b62a0fae7e0201eb5d8983fdace830aef4dd513b76be0b8","sha512":"dba7ea09ea63b526246e4b2efd0ae464506330184ba1e7a54a86c57309c0857910e87aa1a887a0776be32a89151d8af59a7331efc8c7a68493acd567de8b674e","ssdeep":"384:oXbt/gOo+eEajEZNYpZa87wwQXUjdiWdOQbtN2JtUJ9ysVshntaR1HC/qMTxMTuz:UgGyS3QmigH3wAvG6","tlshash":"16e26563ca91603cbc3b546aa2d145ac32196c16bf5b77fade616174c1cb6fb1232f08","first_seen":"2026-02-12T09:47:40.840424Z","last_seen":"2026-09-08T20:27:57.74511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":73,"send":0,"wait":73,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ic_exit_icon_white.svg","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.191Z","timestamp":1788899247191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ic_exit_icon_white.svg HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":389,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.303Z","timestamp":1788899247303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.341Z","timestamp":1788899247341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/favicon-16.ico","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.673Z","timestamp":1788899247673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /favicon-16.ico HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1406\r\nLast-Modified: Fri, 19 Dec 2025 04:14:10 GMT\r\nConnection: keep-alive\r\nETag: \"6944d112-57e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1406,"size_decoded":1648,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8557a1d9185233f887e05884bac8c0f3","sha1":"053cebb19b172d458af517ead83e8144bc9b1cf9","sha256":"bda1423c5730f7a022f597bc7d532648ec4ce095d88d069c92545a55a2da324d","sha512":"d63b57586b912317872558f0e585cea8a9ab67a3a9d1106d1f11139b5da259ac7b1ae12a2c162f5396e21bac4c2e6c07d9595307c82a201c9bbe9a048d9326a7","ssdeep":"","tlshash":"7921ab8aee887b6cc43548b0ca21eeb741099d94c385220f16a4ec4f7d0299e4b91118","first_seen":"2026-02-12T09:47:40.818478Z","last_seen":"2026-09-08T20:27:57.746538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/RobotoFlex-VariableFont_GRAD,XTRA,YOPQ,YTAS,YTDE,YTFI,YTLC,YTUC,opsz,slnt,wdth,wght.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.982Z","timestamp":1788899246982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /RobotoFlex-VariableFont_GRAD,XTRA,YOPQ,YTAS,YTDE,YTFI,YTLC,YTUC,opsz,slnt,wdth,wght.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3_ctw.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.984Z","timestamp":1788899246984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3_ctw.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3Hct-FG.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.989Z","timestamp":1788899246989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3Hct-FG.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/vpnovaya_squares.svg","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.192Z","timestamp":1788899247192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/vpnovaya_squares.svg HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 782\r\nLast-Modified: Fri, 19 Dec 2025 04:15:22 GMT\r\nConnection: keep-alive\r\nETag: \"6944d15a-30e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":782,"size_decoded":1024,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"409a2ac332285432d1fbcd2cc1da6800","sha1":"bbd6bd5cfefac6445074599b67841219926097bc","sha256":"0ca0a6b317ffbc4049a00d2fbb7ab359f8f6a85b896454cc1ad45566d69a9cc1","sha512":"0366aabfc9c35722684859de3328106df90d3d5f6b8c71ae1d570a1c66416d25bcf7cf8f718b82095160026d2de29cfaca962f5d3fc92b0af586c06f0d0c974b","ssdeep":"","tlshash":"5401fd79a214ae3edb90d3bcc8eb9c0c913be1c6c60580d8e214215fad110da3cad3ad","first_seen":"2026-02-12T09:47:40.842104Z","last_seen":"2026-09-08T20:27:57.747466Z","times_seen":3,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":330,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/e82b41d739e8449fabc6df46ed58ccee.webp","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.350Z","timestamp":1788899247350,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/e82b41d739e8449fabc6df46ed58ccee.webp HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 62670\r\nLast-Modified: Fri, 19 Dec 2025 04:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6944d16c-f4ce\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62670,"size_decoded":62912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 620x475, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fda57bd4e6090c2b521b05443aa1c16c","sha1":"5ee08ae88c36d445503c5ae14b5de14315bae79f","sha256":"39aecfa9b3cbaf50e23494aa517f299980c017f45a92acde53ef1246b07774c3","sha512":"842707ada9dd2e3a021cf7ffc57b2a1dad7573acbebb9f7f9f08904d54f420b03d296950d8f6b8f4fc8dfab3a4fa8bb81bd35f0e4357fa46446540d04b337e3a","ssdeep":"1536:mqIQTf19jVFYUp+8zK0xl4EKmZtSuHoX0oWI/yo79Gt65l4LXr:eQL11Vdptr1VIrGt65liXr","tlshash":"b05312db4e4fee55f3d2954150abb01062a50e47abef50bca3b9784894e1974aef32c0","first_seen":"2026-02-12T09:47:40.832646Z","last_seen":"2026-09-08T20:27:57.748097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":72,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/42b5ad24869f4d47bc050fc6c0268cca.webp","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.191Z","timestamp":1788899247191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/42b5ad24869f4d47bc050fc6c0268cca.webp HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 58714\r\nLast-Modified: Fri, 19 Dec 2025 04:15:26 GMT\r\nConnection: keep-alive\r\nETag: \"6944d15e-e55a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58714,"size_decoded":58956,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12a6013119bbe1eede1ad6900b2f6a1d","sha1":"2200a23e947883e440d259a3886dd79d6c6e6098","sha256":"d7b4663141f557d30ce6c2404e128489679ab04605eca2a8f79513951be8e73b","sha512":"0393b42780dc7b24031368c95c8a8663e1fa3653b67163c5456933d3fa46f023e43ccb92911753a15e366653cb3289780c7fef39a629de5e49bb0b0a7c04613e","ssdeep":"768:QW2cxwm0TR0bs717T3SWmXkifMa8bgOunBu9FkmYZzt24z9dumwxzSob0fq5o2+V:QWL6fybYMZq7TSm2ekQFJF8FxnEbD+","tlshash":"af4302fb2543d0cec624481fd70ece8b354cf49d9d2fa7041a15167c4eb7abe4aa6a44","first_seen":"2026-02-12T09:47:40.845483Z","last_seen":"2026-09-08T20:27:57.748677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":74,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOlCnqEu92Fr1MmYUtfBBc4AMP6lQ.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.342Z","timestamp":1788899247342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmYUtfBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/css/st1.css","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.971Z","timestamp":1788899246971,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/css/st1.css HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:26 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 19 Dec 2025 04:15:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6944d146-14754\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83796,"size_decoded":19643,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4c0adde5b52eb8eb97b9565373360094","sha1":"4f18977d1622195641ca3297781e6f2fa719ec5f","sha256":"17a36e0d1204b57332547140333c31cfe47b28408cdeb03f8aee320ac3cc7628","sha512":"5b13ccf880548152b1227deeba209d3be146d3ffacf7e1eeed77ac883e7963dfca9c3f83c8fb3147ff9cb764c1c140891dbb9726ec0e667689bbbbbb071720ab","ssdeep":"768:G8zINI0Ol1Qt7+Umh65BK1w0kJ82+weLtAXmfYmx1sQ7:GNOLsv1QYmxaK","tlshash":"4883d8638951113c78379d26c3cc89aca22ed4539a531eedbb852019c7cb7df2376b4a","first_seen":"2026-02-12T09:47:40.823725Z","last_seen":"2026-09-08T20:27:57.74926Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6Kaw1J5X9T9RW6j9bNfFImajC7XsdBMg.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.991Z","timestamp":1788899246991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6Kaw1J5X9T9RW6j9bNfFImajC7XsdBMg.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/ic_search_white_24dp_v3.svg","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.190Z","timestamp":1788899247190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/ic_search_white_24dp_v3.svg HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1290\r\nLast-Modified: Fri, 19 Dec 2025 04:15:24 GMT\r\nConnection: keep-alive\r\nETag: \"6944d15c-50a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1290,"size_decoded":1533,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92422c38801211b6052a9666ce7ed30f","sha1":"a38f4fcdc5285077d7c4a09cd733fb00572abeab","sha256":"f9705d1bec96ee6af6ff4136dbca0b612e46e74652f2bdbfcc1dfc73bce4bb77","sha512":"57dd36bacc23a80803bde340e1df2baffa5136e78f181f51867ccb3a1da2da949d2a39271ec37a42206094473724d9b0ea79df02808973aaf5c5af8af64d52d1","ssdeep":"","tlshash":"7121ab9e17c9efd5c05bbfc81025b5b07a233c2aaff9e16b44a5eae2035441cc89dc64","first_seen":"2026-02-12T09:47:40.828564Z","last_seen":"2026-09-08T20:27:57.749999Z","times_seen":3,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":260,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/ic_share_grey_40dp.svg","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.193Z","timestamp":1788899247193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/ic_share_grey_40dp.svg HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3903\r\nLast-Modified: Fri, 19 Dec 2025 04:15:18 GMT\r\nConnection: keep-alive\r\nETag: \"6944d156-f3f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3903,"size_decoded":4146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fc93dafb51e49c485a2c8666805a83a","sha1":"c68922687ac6123f6bb1837956bd13cec2d1e4d1","sha256":"c0b297c622ea75dea538c44c4eebe1521178c10fe9c6d0fd7a09256ca2eeffe4","sha512":"aa3a379b493822b81d172055835775b320b790dae3fabc8c294d4f5feabbddac34bb299362fd9080afc499650b26e05b37bd80308b4277f88c41cb6f50a1dba6","ssdeep":"","tlshash":"f68195efa7ba95f4d109e3f0819aec746a6318fa3721c59a8b911cc2d3510bd5498c87","first_seen":"2026-02-12T09:47:40.830774Z","last_seen":"2026-09-08T20:27:57.750583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":332,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.347Z","timestamp":1788899247347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T20:27:26.420Z","timestamp":1788899246420,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 18620\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70330,"size_decoded":18832,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3053)","md5":"2c4e7f22975d1468991895faa8e4101d","sha1":"1e7b48b61c547254c787038798bdce5476f5e8e3","sha256":"e0d7bdecaea726571f02b7d57c497f20445e44bf2a23f48dbfa88411f493a333","sha512":"ec4e5e8c97eef2e5220832a0d6a73a3fe08db191236934b553471d9a55ecdd620c0a74bd2e8c4b26d2a5ae2cc67826a17ea5339caffe12ef0de384bc46f3f8cd","ssdeep":"1536:U4qaL84uG4f4OopoCodQ/tseVtHtfD7zJ6ov4WrinSUJ3hXO4Mar5+QdYxZSu1WD:GNitfD/9sXO4TrshhgL4eJg36ELc","tlshash":"d1632e608689149e5202f457ed087e0d3cdb54ff3f9b961635bc2ebe7be2468862834d","first_seen":"2026-09-08T19:52:00.622863Z","last_seen":"2026-09-08T20:27:57.75125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":7,"connect":80,"send":0,"wait":150,"receive":10,"ssl":155},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/css/st2.css","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.975Z","timestamp":1788899246975,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/css/st2.css HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 19 Dec 2025 04:14:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6944d140-11ee5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73445,"size_decoded":21434,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"fa405433610af494f117e504812b2192","sha1":"0f05db83d2a54a7dd98cf7199fb0116890cc4d27","sha256":"b9fb122a51478ad0f87946dd3b78d91b35070e9004d3e4c88b22acf5494e39a0","sha512":"645ce44ba76ea4fab939ea4ad1376510a71b18399ffd808cbbb77ef3375650f74a975a8e5e285e53177ec63396a8c1c754cd8764dbb5f9ba41962526571330ee","ssdeep":"768:tyn2hRWVJZbJ1tCObpgImEX83uzSgC3WR9/6:tynMRWVJZbJ1tCtIrXI8C3M6","tlshash":"1373c533d651203cb437992973c096ac362da917bf672afaeb516624c2cb7fa1131b44","first_seen":"2026-02-12T09:47:40.826214Z","last_seen":"2026-09-08T20:27:57.752134Z","times_seen":3,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":75,"send":0,"wait":150,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/css/st5.css","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.979Z","timestamp":1788899246979,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/css/st5.css HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/css\r\nContent-Length: 80\r\nLast-Modified: Fri, 19 Dec 2025 04:15:00 GMT\r\nConnection: keep-alive\r\nETag: \"6944d144-50\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80,"size_decoded":315,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"aab171c865e8b178c325ef56a73b5198","sha1":"f5f66b00e262add7ea685cd65a3e5e54552baa65","sha256":"80e4c1f9ce908b3fe260412b08d47c762cc976926a08bd0f966fac90d8476561","sha512":"411b2b2c9e4a99bda89961528f0f6cc00b5428a2a6d61043f66b66b29ce3b167a17072351099e77c9e424e4d614f29371baf48cbd3409980ddffc55a27e75ee5","ssdeep":"","tlshash":"41a002011955248185a7277056d01014b555352225474451f2a455624b741b4c912d49","first_seen":"2026-02-12T09:47:40.83637Z","last_seen":"2026-09-08T20:27:57.752705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":74,"send":0,"wait":73,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6Law1J5X9T9RW6j9bNdOwzfROece9LOocoDg.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.995Z","timestamp":1788899246995,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6Law1J5X9T9RW6j9bNdOwzfROece9LOocoDg.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6Law1J5X9T9RW6j9bNdOwzfReece9LOoc.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.996Z","timestamp":1788899246996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6Law1J5X9T9RW6j9bNdOwzfReece9LOoc.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/logo-pic.png","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.187Z","timestamp":1788899247187,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/logo-pic.png HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 19 Dec 2025 04:15:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6944d162-1113\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4371,"size_decoded":4624,"mime_type":"image/png","magic":"PNG image data, 601 x 295, 8-bit colormap, non-interlaced","md5":"c1a0a4110f7f0253961a56fd5c031611","sha1":"48632c59592008d33580e60826f551bd0f2c4358","sha256":"3f202b74883c79cecb661d6fddc3219d9c74ea898e5314899b2e07b5b1e65473","sha512":"89a81225ab83c5265938d0aff2d9158d1f18182f7962c19e2cc650120dfcb1fc09cd70b8ad1886394a89498eff8bcc633e2d3760ca16f68cd7daf5e0f32e1db6","ssdeep":"96:CtDFFBrERn1UvFFatC2uqQOMUejRXw1JUI1Hx/1R:oFhgn1UvCtCuTML5w1Jhn","tlshash":"12915d2f9c5209ccf7182e8248f64154d98e01e8537b3c0f6a5666f47a62f334b6878d","first_seen":"2026-02-12T09:47:40.821171Z","last_seen":"2026-09-08T20:27:57.753379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":317,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOlCnqEu92Fr1MmEU9fABc4AMP6lbBP.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.348Z","timestamp":1788899247348,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmEU9fABc4AMP6lbBP.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/css/st3.css","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.977Z","timestamp":1788899246977,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/css/st3.css HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 19 Dec 2025 04:14:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6944d140-990b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39179,"size_decoded":10312,"mime_type":"text/css","magic":"ASCII text, with very long lines (39179), with no line terminators","md5":"cf9d6838995b844b0c47f8de022bb468","sha1":"6cb35398b79e077d1054d658e1b0838487f4e3fc","sha256":"4d34fd3fc02939bee13820875f401a757f87b9843f1e2d5f2e4067fe2c2619f2","sha512":"6bed12671bc8611ce3b3f31fa410fa36f5212af442ba48726eebfd00a5bd6831150c4567dbc37bfd2ea7ab0ff7fcbb984898bbd3c3b302d3969d907ee8f5f6cf","ssdeep":"384:AHog6evQuDNnZ8lBB7xIkViFU6zDaXApogPKXOSfMkDtZJG21Oz5eh4kT7wtwPre:8ZpikShb/0W2DhX/oQ","tlshash":"4803a7335aa1203cbc2be46691d5d6ac331c6959af1737e9ee50a234c5ca3eb1631f4c","first_seen":"2026-02-12T09:47:40.834552Z","last_seen":"2026-09-08T20:27:57.754355Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":72,"send":0,"wait":143,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3Lct-FG.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.988Z","timestamp":1788899246988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3Lct-FG.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6Iaw1J5X9T9RW6j9bNfFcWaDq8fMU.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.994Z","timestamp":1788899246994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6Iaw1J5X9T9RW6j9bNfFcWaDq8fMU.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.345Z","timestamp":1788899247345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/static/js/client.4aqzphh50u5.bfa4f54d.chunk.js","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.980Z","timestamp":1788899246980,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /static/js/client.4aqzphh50u5.bfa4f54d.chunk.js HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":74,"send":0,"wait":80,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3vct-FG.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.983Z","timestamp":1788899246983,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3vct-FG.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6daw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTYf0D33Esw.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.985Z","timestamp":1788899246985,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6daw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTYf0D33Esw.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6daw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTYf3D33Esw.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.987Z","timestamp":1788899246987,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6daw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTYf3D33Esw.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6Iaw1J5X9T9RW6j9bNfFMWaDq8fMVxMw.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.993Z","timestamp":1788899246993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6Iaw1J5X9T9RW6j9bNfFMWaDq8fMVxMw.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.346Z","timestamp":1788899247346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/ga6Kaw1J5X9T9RW6j9bNfFImbjC7XsdBMr8R.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:26.990Z","timestamp":1788899246990,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /ga6Kaw1J5X9T9RW6j9bNfFImbjC7XsdBMr8R.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/assets/img/ic_print_grey_24dp.svg","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.194Z","timestamp":1788899247194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /assets/img/ic_print_grey_24dp.svg HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 302\r\nLast-Modified: Fri, 19 Dec 2025 04:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6944d16c-12e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":302,"size_decoded":544,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"779ec662a9dbb4d412694340d5a3e63c","sha1":"bdff36b508da139f9e8202325694fc984b019996","sha256":"6d3fd97d66d52a89bdab448a76a426db3b78dcd855b068af594f2c6c243d70a7","sha512":"3e9f7f3d9c41edfdb61307f699120e3930f7fa6c9c664ac2825da1479bb69871b950297fcff27182eaeaa8294860a94f8824b06b6c86c14924da34ea92f93ef0","ssdeep":"","tlshash":"a8e07288c0dc2420660cd3309a38f03f28fea1e0b20c01b8a480032cf20ad8338666ba","first_seen":"2026-02-12T09:47:40.843906Z","last_seen":"2026-09-08T20:27:57.754913Z","times_seen":4,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":332,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh.com/KFOlCnqEu92Fr1MmYUtfABc4AMP6lbBP.woff2","fqdn":"kraken2trfqodidvlh.com","domain":"kraken2trfqodidvlh.com","tld":"com"},"ip":{"addr":"178.16.55.186","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh.com/","date":"2026-09-08T20:27:27.344Z","timestamp":1788899247344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 08:13:33 GMT","end":"Mon, 23 Nov 2026 08:13:32 GMT"},"fingerprint":{"sha1":"93:FD:73:75:D3:FB:0B:F3:8D:AD:F5:A4:53:5D:B2:0F:C9:18:F4:C2","sha256":"E0:45:AF:C4:49:6D:20:C0:68:78:F6:48:7B:69:41:D5:41:9A:E8:0F:96:66:5E:1B:D7:8E:B1:A2:C3:A8:F6:00"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmYUtfABc4AMP6lbBP.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 08 Sep 2026 20:27:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 27\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":196,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"982592e351f12c099e7a55b1682af09f","sha1":"8b9c9964a9bac745ae3bad0df534c3c3876953a8","sha256":"4e87b746ab5081bad97c3a7b5a7e41f02d02aa75d74ecf52e0e3caea2c2a729e","sha512":"f33dd74df4d58035b1a34e038a16958ed0c5ba9986811da6db57f2fd77d6d04aabf38d47013dcdf0e8c3c6bedeb7058abdb51a3c062e9da7cb9185c9f65fe3ee","ssdeep":"","tlshash":"a7800008283aea8a322222000a28080238808c3eff82a2020082382e00820a08388000","first_seen":"2026-01-20T09:26:23.966427Z","last_seen":"2026-09-08T20:27:57.746041Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"kraken2trfqodidvlh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}