{"report_id":"7186319f-888a-44a8-b2cb-d11d04631c90","version":6,"status":"done","tags":[],"date":"2025-08-29T06:25:34Z","url":{"schema":"http","addr":"kraken-mp.com","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"ip":{"addr":"104.21.74.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kraken-mp.com/","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"title":"KRAKEN DARKNET MARKETPLACE - Ведущая площадка теневого мира"},"submit":{"url":{"schema":"http","addr":"kraken-mp.com","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"ip":{"addr":"104.21.74.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T06:25:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"kraken-mp.com","ip":{"addr":"172.67.155.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":107108,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-08-28T15:50:28.221861Z","alert_count":0,"request_count":1,"received_data":19418,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"previews.123rf.com","ip":{"addr":"3.167.2.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-03-04","domain_rank":578183,"first_seen":"2014-10-31T11:40:58Z","last_seen":"2025-08-24T16:26:31.266838Z","alert_count":0,"request_count":1,"received_data":87607,"sent_data":919,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"png.pngtree.com","ip":{"addr":"104.18.2.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-01-09","domain_rank":298099,"first_seen":"2017-03-16T13:43:13Z","last_seen":"2025-08-22T23:35:37.963266Z","alert_count":0,"request_count":1,"received_data":82766,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kraken-mp.com/","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"ip":{"addr":"172.67.155.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91d0ede6ce0dab8866b4c5507692459d","sha1":"0328e43e2722120f336f44eca5b575cad5fef4d7","sha256":"eb186e6222e63f127cf0e119aef3811f8c891c50332cb08296885e7b8c28ee86","sha512":"ebfe5881b9694792f7446722b1bbac4fea2160adf7f183551e2a0681985846cd17014a0aa9bdb6b636900988caaee4d76c1c2608edbe8f97b6093700949c5da1","ssdeep":"","tlshash":"f8f00e942cd84024437311296bbb9148b43969282c0aed14f54c84812f99ea808bb94c","size":514,"data":"","first_seen":"2025-08-29T06:25:38.478131Z","last_seen":"2026-02-14T08:49:14.973399Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-mp.com/","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"ip":{"addr":"172.67.155.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d54759a7270d2c6b6a6aa4d963e9d1e8","sha1":"cd956301b77f0500e5e4ab6a5074f349283078bd","sha256":"b576169838d992a0e91122aed34e8973c9e937d2e3e2a8d0e71dead3f561eb25","sha512":"daa394693a1e9001f20b291efc2e7560d4178066c97e7e8e9ed7ed45cca46be4127b6ab37a3c5e098f23b0a988fb42fdb5af6024714d9c12739fce938726425b","ssdeep":"","tlshash":"4a11401972530530c6dfb86f5b39d3843c70914f5c06ca05b52cc5d5cf61e5796da998","size":980,"data":"","first_seen":"2025-08-29T06:25:38.480859Z","last_seen":"2026-02-14T08:49:14.974009Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kraken-mp.com/","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"ip":{"addr":"172.67.155.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:25:13.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-mp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 07:23:40 GMT","end":"Sat, 15 Nov 2025 08:22:18 GMT"},"fingerprint":{"sha1":"38:0F:08:B9:63:48:EB:F3:02:E4:18:A8:E0:D6:71:F9:9C:D2:03:20","sha256":"4C:1D:38:EB:BF:1D:D4:FC:A5:B1:9B:51:1C:60:5E:BC:CE:77:15:FA:36:FF:63:A8:EA:54:80:2A:36:B6:2C:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken-mp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:25:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 17 Aug 2025 08:20:19 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyNGq9edX9%2B1ECMEkLogn5APyseZiCJYK1DUwIBPOw3jJGgtYL5h6UGiKKgurFsbkxS8IZJ9XaoTAqn125DcMVCLh4ORgFhL1o%2FimIo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9769f848b8c70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47616,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (861)","md5":"b9404fce78519fb0bf8a482370ccc2b6","sha1":"1ef9f4a6e1250621ff97d434d3250fbdb8688363","sha256":"73e9899aa08fa1231b12fc58ad06944478c9e719adde1fe36db36cd6088e9d8d","sha512":"bc6218e3eefe76ce059a1934e302003ae9aef87d07725464e14d5f58f71ff3e3748d7078ffeda929147ed290a337974f8adfa5a5f2ccfd30319510fd31b0f077","ssdeep":"768:muhTPJVHLn594kOnBaB3R9mQfmIUqYwsQKoaNxJHKQ7R21woarcCHJxLAs3oUxYz:muhTPJJ0aB3bm9NwsQKoafJHKQ7R2Co7","tlshash":"1e232f9156eb148a1602f416ce086f0e3daa40ff7f1b97a635ac797e7fe2014c57a309","first_seen":"2025-08-29T06:25:38.462846Z","last_seen":"2025-08-29T06:25:38.462846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":30,"dns":14,"connect":1,"send":0,"wait":800,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/ru/1/19/Kraken_logo.jpeg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-mp.com/","date":"2025-08-29T06:25:14.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 07:58:25 GMT","end":"Fri, 14 Nov 2025 07:58:24 GMT"},"fingerprint":{"sha1":"00:6B:23:79:C6:3F:3F:33:1C:96:A8:58:E3:42:75:58:02:2B:84:D3","sha256":"AC:53:65:9E:C2:DF:AA:6F:9B:55:55:44:CF:4E:94:5A:41:C1:12:6D:4F:EA:F3:3D:EB:5E:40:17:00:3A:2E:26"}}},"request":{"raw":"GET /wikipedia/ru/1/19/Kraken_logo.jpeg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-mp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-object-meta-sha1base36: 240q058iwvh6fhidparn70brq1splmm\r\nlast-modified: Tue, 07 Mar 2023 15:35:46 GMT\r\ncontent-length: 17587\r\ndate: Fri, 29 Aug 2025 03:16:53 GMT\r\nserver: envoy\r\netag: 3aa94bacd8d5c41b037b320749959b6e\r\nage: 11300\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/3\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; media-src data:; sandbox; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; media-src data:; sandbox; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=E_qOJA0NX3mJ661WSRaAoAJeAAAAAFvdAlW_GZFtSmerShriKm1m7T-EedAJG_17;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 29 Aug 2026 00:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":17587,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 640x640, components 3","md5":"3aa94bacd8d5c41b037b320749959b6e","sha1":"1213df5a046a27a9bbdc7a2f97e18e09a74dd9be","sha256":"c0981b238ae6834e2e11fe84801f884bedb0e9fb8b7f7dfcd90dada7ba469686","sha512":"01a0ce204fe4434d12d52e20129dcd9f7cbd713a8e5beffa57a74093ca26a17b5a0015ab51d879f1d4eefdbbf6cdb60f614983d2ff4e106b1a0fa663e916bd6a","ssdeep":"384:ohre9HpI9q67QnEyGvql0wTWDMmiuqVP0Asl+5i50wCWcfvXXVm0:Yb9q+QE0cDo8N+U5yzXXVm0","tlshash":"6e82d072e6b5a711ceb10ff8cfaf6bf18310977ad232a62a7b004635ef54758409c952","first_seen":"2025-08-29T06:25:38.467915Z","last_seen":"2026-02-18T18:09:45.028969Z","times_seen":18,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":201,"dns":160,"connect":19,"send":0,"wait":38,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"previews.123rf.com/images/prostoira777/prostoira7771801/prostoira777180100028/93851560-%D0%BA%D1%80%D0%B0%D1%81%D0%BD%D1%8B%D0%B9-%D1%80%D0%BE%D1%82-%D1%8F%D0%B7%D1%8B%D0%BA-%D0%BD%D0%B0%D1%80%D0%BA%D0%BE%D1%82%D0%B8%D0%BA%D0%B8-%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D1%84%D0%B8%D0%BB%D1%8C%D0%BC-extasy-%D0%BC%D0%B4%D0%BC%D0%B0-%D0%BD%D0%B0%D0%BA%D0%BB%D0%B5%D0%B9%D0%BA%D0%B0-%D0%B2-%D1%81%D1%82%D0%B8%D0%BB%D0%B5-%D0%BF%D0%BE%D0%BF-%D0%B0%D1%80%D1%82-%D0%B7%D0%BD%D0%B0%D1%87%D0%BE%D0%BA-%D0%BF%D0%B0%D1%82%D1%87.jpg","fqdn":"previews.123rf.com","domain":"123rf.com","tld":"com"},"ip":{"addr":"3.167.2.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-mp.com/","date":"2025-08-29T06:25:14.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123rf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 08 Mar 2025 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:36:7A:1D:6B:64:06:84:8B:E1:86:3C:2F:42:B6:A9:0B:8D:1F:8D","sha256":"95:F0:3B:5D:6A:15:1A:62:D3:FE:38:20:4A:D0:4B:4B:47:01:0C:F5:07:89:CC:D3:6B:E5:E1:6C:EA:CD:EC:4B"}}},"request":{"raw":"GET /images/prostoira777/prostoira7771801/prostoira777180100028/93851560-%D0%BA%D1%80%D0%B0%D1%81%D0%BD%D1%8B%D0%B9-%D1%80%D0%BE%D1%82-%D1%8F%D0%B7%D1%8B%D0%BA-%D0%BD%D0%B0%D1%80%D0%BA%D0%BE%D1%82%D0%B8%D0%BA%D0%B8-%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D1%84%D0%B8%D0%BB%D1%8C%D0%BC-extasy-%D0%BC%D0%B4%D0%BC%D0%B0-%D0%BD%D0%B0%D0%BA%D0%BB%D0%B5%D0%B9%D0%BA%D0%B0-%D0%B2-%D1%81%D1%82%D0%B8%D0%BB%D0%B5-%D0%BF%D0%BE%D0%BF-%D0%B0%D1%80%D1%82-%D0%B7%D0%BD%D0%B0%D1%87%D0%BE%D0%BA-%D0%BF%D0%B0%D1%82%D1%87.jpg HTTP/1.1\r\nHost: previews.123rf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-mp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 87093\r\ndate: Sat, 23 Aug 2025 02:58:51 GMT\r\nlast-modified: Thu, 26 Nov 2020 13:31:17 GMT\r\netag: \"249f74714be29acfd0e7dc0509646313\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8b440cccbe8a332306f650e1ec8894ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: G7zc_EIca1DWCLJoO1PLKK3bevZnSNI2VZrPb6G6m-HYhOrXpzAFsQ==\r\nage: 530784\r\ncache-control: public, max-age=7776000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":87093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, description=Red Mouth, tongue, drug. Cartoon Extasy, MDMA. Pop art Sticker, patch badge isolated on white., xresolution=122, yresolution=130, resolutionunit=2], progressive, precision 8, 1300x1300, components 3","md5":"249f74714be29acfd0e7dc0509646313","sha1":"1dca7f3890e3760c1651adc15e88aa7ac1f77eea","sha256":"16a09fb68af6c0e7ac6c055c6c03ad85e62538f51edd97e595418670fdb71cdb","sha512":"a2c2894ec2725e8c1028ffbcfa384570596073336c1429339fa89b9396dd8deb757130e002903a8bdfa4992c7d2dd8d967c7c2ec82e5cea87de70c7cbdb300c9","ssdeep":"1536:uRJ5KmYHFDje+C9alQqeFqkcSJiQKO+yEC8/aBED3LmI2bn3E:m5KJFje+WtqeFncDnBy4/a2m9n3E","tlshash":"5983cf113ba08652d068b639a0fec211e6e76cd58d7a410f7b9ec8385f30e295de7787","first_seen":"2025-08-29T06:25:38.470856Z","last_seen":"2026-02-14T08:49:14.972331Z","times_seen":7,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":79,"dns":53,"connect":1,"send":0,"wait":63,"receive":4,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"png.pngtree.com/png-clipart/20190611/original/pngtree-internet-information-security-protection-png-image_3075061.jpg","fqdn":"png.pngtree.com","domain":"pngtree.com","tld":"com"},"ip":{"addr":"104.18.2.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-mp.com/","date":"2025-08-29T06:25:14.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pngtree.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 06 May 2025 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:33:38:35:38:43:D8:E2:61:CE:65:6F:9A:CB:89:E1:B9:F6:3C","sha256":"AC:C8:F8:E5:FF:53:C5:E6:96:D1:31:AC:64:9A:93:95:D0:D0:73:A5:91:0A:87:03:00:72:74:1E:FE:F2:44:F5"}}},"request":{"raw":"GET /png-clipart/20190611/original/pngtree-internet-information-security-protection-png-image_3075061.jpg HTTP/1.1\r\nHost: png.pngtree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-mp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:25:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81857\r\ncf-ray: 9769f84f39cb56c4-OSL\r\ncache-control: public, max-age=16070400\r\ncf-bgj: h2pri\r\netag: \"1d9ed6499d7501a19b1cf79b1eccdb98\"\r\nlast-modified: Tue, 01 Jul 2025 10:15:48 GMT\r\nx-amz-id-2: wY9Yb+jsKZ/1n73+q+rm9tGMJdCWLI7k5mG4u3h5w3FCb6ER3cuLJ5lwhl9EGInK0lBOWEE0Wb8=\r\nx-amz-request-id: 7PB4NJJ6JDSCQC1A\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nexpires: Tue, 03 Mar 2026 06:25:14 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=XzBgKXSvqO8sKrXfyB3J2h9tTvK.AkfcXDrMLFkR4Ns-1756448715-1.0.1.1-fX44PHgtZAWqY3Af4MUnxb3zElbSlbMxFeyQ4PtSfEk5jaaQc67YwEJAvJSY3L_n1..8bxMbY.5M7_KAiSGdpCm1LUkJkvRHEBTcIgFqLrI; path=/; expires=Fri, 29-Aug-25 06:55:15 GMT; domain=.pngtree.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":81857,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, extended sequential, precision 8, 1200x1200, components 3","md5":"1d9ed6499d7501a19b1cf79b1eccdb98","sha1":"bc69f02ea3ab2b23019b75d8a90eb113a0efb60f","sha256":"c2c0e6b77bd5de5e45d5f3f242691d54abf963c6e6ebbe204773114078068307","sha512":"097c192e7765fc41ec15b0438a895cd8ebd5d0e8a42e02116d6afb654ea39d05ca8b3628090f4cc3005b5491a6dffb00a3406ec9e1e30cb635a6ac5c6637b497","ssdeep":"1536:9XXXXXzXXXXXJXXXXX3XXHXgkXbwXxXXwAWXXXXW4EyyuiyGVSHIHvmmsWTSO+y/:9XXXXXzXXXXXJXXXXX3XXHXgkXbwXxX/","tlshash":"4783298fbb82c83dfec23171602ba945336ecde6f2881e503705aa05527c7e539b55da","first_seen":"2025-08-29T06:25:38.473868Z","last_seen":"2026-02-14T08:49:14.972871Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1241,"timings":{"blocked":43,"dns":30,"connect":1,"send":0,"wait":1105,"receive":45,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-mp.com/favicon.ico","fqdn":"kraken-mp.com","domain":"kraken-mp.com","tld":"com"},"ip":{"addr":"172.67.155.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-mp.com/","date":"2025-08-29T06:25:14.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-mp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 07:23:40 GMT","end":"Sat, 15 Nov 2025 08:22:18 GMT"},"fingerprint":{"sha1":"38:0F:08:B9:63:48:EB:F3:02:E4:18:A8:E0:D6:71:F9:9C:D2:03:20","sha256":"4C:1D:38:EB:BF:1D:D4:FC:A5:B1:9B:51:1C:60:5E:BC:CE:77:15:FA:36:FF:63:A8:EA:54:80:2A:36:B6:2C:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kraken-mp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-mp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 06:25:15 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cF9Rv%2FRCDWINqi%2FMqXIBFnhQtIv1IzVY%2FrUERWa0aHE4zF2aqqrlHeO4SvOF1FWaatfHYRXGNPk56g8IXqPBQpR9zMdowXhjjuzKxqc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9769f8514ebdf9e2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-08-09T11:41:05.537393Z","times_seen":13800,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":676,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
