{"report_id":"793d171c-2404-4d30-828e-cc916d111523","version":6,"status":"done","tags":[],"date":"2026-02-14T05:50:00Z","url":{"schema":"https","addr":"krak-qr.cc/","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krak-qr.cc/","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"title":"KRaKeN QR — быстрый и безопасный вход на маркетплейс по кюар-коду","dom":{"size":12470,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (668)","md5":"c16a46c8ac3d1345bf836b0ff6e4e384","sha1":"fa172aadf9f2bee90a461779edadd59dc476e764","sha256":"8872bdb1745db691bc744fa3f622e1ef05f4048dd80f44ec6d6e18c240c484ab","sha512":"72bc8124eb77decf274af7826c56d8fb4709577c0daa8eabd06b1b426888010566385912a9b4ecb66767d8dba287767b5c1efcbd13c3df21081be263ad9191d4","ssdeep":"192:eCfgr1xfUODusmELnea3ohfGKHySKg0yDIPp0mDg9/q:R+UODFmELneaiGKH5KVyEPDf","tlshash":"7b42545216ea30e60106e066d905be0c7df6417fbf66a75131ac2daf3ff2960c86b21d","dom_hash":"domhasha440b6e8d4de06a9f8377b84190a257c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krak-qr.cc/","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:50:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T05:49:39Z","timestamp":1771048179,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45090,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-14T05:49:39.535663+0000\",\"flow_id\":2043983743354209,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":45090,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"worker-kv.cloudkra1.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3472,\"start\":\"2026-02-14T05:49:39.525665+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"worker-kv.cloudkra1.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"krak-qr.cc","ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-10","domain_rank":0,"first_seen":"2026-02-13T04:04:05.054439Z","last_seen":"2026-02-13T04:04:05.054439Z","alert_count":14,"request_count":14,"received_data":787824,"sent_data":6171,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":2,"received_data":104306,"sent_data":1069,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":5573,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"worker-kv.cloudkra1.workers.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2025-03-07T06:55:42.163343Z","last_seen":"2026-02-13T04:00:23.091072Z","alert_count":1,"request_count":1,"received_data":2134,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krak-qr.cc/","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ebca7bc5df57ce299078d190ddacb23","sha1":"6dac27dddb0dab71a280560a3978fc5f92731ce0","sha256":"cbff189c03a7df620e9524c54d859b63da3373cb244380dd52adb2571df1dfff","sha512":"5f923f1a8261f8afb0f8ec0e1c77cc25b701da6f7a21e5272431d25dc1c531547d69109ee0481ce811c01a727728bb7ca5df4229aa3962f09eadde001434fd2e","ssdeep":"","tlshash":"bf01f14239920235574f3537ed23d14eb631c0bdbaa1e609301dc5481bf181198bfb4c","size":796,"data":"","first_seen":"2025-11-28T17:58:00.532121Z","last_seen":"2026-04-27T07:19:37.518842Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/5t8ovqm4ctqm48tvq598tcq9m8y356v8ou8xw4tm994mt9qmctmh9vtchvh759e0t94ttYm97y.js","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3134ad9e093ec073e2b0c02a27fbb546","sha1":"a3ed58f99f740aaab63f73f484f9d28dc54955f5","sha256":"caae01d4f620591b48f3501a3cb17f075783dd0684a42fbddce5eb9876d529f2","sha512":"c5ff8d4f9a6e9b2e02250e772c6785e356309e6e630f966ab08831b3b07b056525f2dda4f8cf214817f4a2acbca70fc5068eda13645d0d065f25aef5e4aa36de","ssdeep":"","tlshash":"d66175150c9621806339a7abbb3b78c1e6278a7f0280658b797db550eff1959ccc2f74","size":3209,"data":"","first_seen":"2025-03-07T06:55:47.268647Z","last_seen":"2026-05-25T10:15:58.344127Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/54vw6o8m68c54c844896c3498vh634mvmcm48cm3jt4093j4tc9j.js","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb7c2b7e2d1653017f35ad6a6db8a2e","sha1":"f088d55aac3947b2aaeca122d0973c2e6711f5f8","sha256":"38a0609c18eb6a2d03e22009a3a6c271e430f2541408ce542d543f11de667a3a","sha512":"de6fcc9de21563e4d36a13e6cbb3dcbdf8c5267a76808ee17862fb7eb1c51509dbef7b1764036b8a0018d8953f48fc180a6195361171fa240e2472afb4d28642","ssdeep":"","tlshash":"7a119b69b45a1039003b7bbfc987e40dfa60753b6a409208b95c48993ff4a347991fac","size":1079,"data":"","first_seen":"2025-03-07T06:55:47.257646Z","last_seen":"2026-05-25T10:15:58.329875Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ab8d64cb06242b34819dc6fa57e7a51","sha1":"a441efd6beca4c2f4f13cfe184be2f4c31cf42d3","sha256":"b7c565ef59f96f039e0654055627e0c5b183a40da3630a9abedda9fc519baa47","sha512":"ce223c0dc37b4708cc33d9af4fbb5b9167cc080bd57a8126be98b79cf1292c7c798252ba9da245a596ebeca2bfaf9231cbf126e35baca0b40ddf2dad51acc230","ssdeep":"","tlshash":"c4f020aa7cc94434c3bb12752bb391443039393f340ead11f65d18d23f91c6148bb91c","size":572,"data":"","first_seen":"2026-02-13T04:04:14.501076Z","last_seen":"2026-02-14T05:50:01.997083Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krak-qr.cc/54vw6o8m68c54c844896c3498vh634mvmcm48cm3jt4093j4tc9j.js","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /54vw6o8m68c54c844896c3498vh634mvmcm48cm3jt4093j4tc9j.js HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCVscUKaK2d7hp4rrwMX3O5ddFjDsWYUFkTMl52eUGP6YIRBn%2FyH60g6puSWoVqAzmFeZkMXOOGeL2JYAd%2FfNvzXXe6t2HShtrA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4671a0bbbd594caef69020425d63467e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda4890ddaf0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1079,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ceb7c2b7e2d1653017f35ad6a6db8a2e","sha1":"f088d55aac3947b2aaeca122d0973c2e6711f5f8","sha256":"38a0609c18eb6a2d03e22009a3a6c271e430f2541408ce542d543f11de667a3a","sha512":"de6fcc9de21563e4d36a13e6cbb3dcbdf8c5267a76808ee17862fb7eb1c51509dbef7b1764036b8a0018d8953f48fc180a6195361171fa240e2472afb4d28642","ssdeep":"","tlshash":"7a119b69b45a1039003b7bbfc987e40dfa60753b6a409208b95c48993ff4a347991fac","first_seen":"2025-03-07T06:55:47.257646Z","last_seen":"2026-05-25T10:15:58.329875Z","times_seen":183,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/main.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/main.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/styles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 572318\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5719c74e48ac36840a114c536583af27\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otIiiUUMnB2FkNwu45OgRSIdu2a250%2Fx3c14qwFLj5DCnbSfEcDttyrbLREAX43ZKY%2Fm2frxyO%2BqL0EIxlGZFPMh7J2X%2Fr3930E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4891ddc50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1400 x 1434, 8-bit/color RGBA, non-interlaced","md5":"cadd19f9def73420ac87eee37a8e0211","sha1":"a405d15719a9b07d6458b4871a05e3a5231ec51d","sha256":"d984a520cafefc7c5fcdb7b068241f91e320176e71a7b96342e04c839082a2da","sha512":"4ec3909d31122084a75956aac4dee70c33c5b109d9d2e1aefe880b9f043235a9e4f05a8c8b79d2e5834df3fe98f73f76d77b5020906e7760f22e79bd01a8449f","ssdeep":"12288:hdFsC8Luf+YB8cavC1d6c2FV0C08ihCWNziocAXH0IISYMRl4qMzcdIi6VB:z+Cuuf1B8906fUHCWkTAXHlLdbWiQ","tlshash":"26c4129786b9cc95feaf10fe9fd12c8f896124f08afc8072e32785ed690b9d41558489","first_seen":"2026-02-13T04:04:14.458031Z","last_seen":"2026-02-14T05:50:01.984727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://krak-qr.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 18:20:43 GMT\r\nexpires: Tue, 09 Feb 2027 18:20:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 386936\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-07T08:19:50.569223Z","times_seen":25791,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":167,"dns":0,"connect":10,"send":0,"wait":8,"receive":9,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/qrc.svg","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/qrc.svg HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cg19lgCii8Y3dh%2BZ5R6mnjzwdIUfz5cg%2BDjVGJR%2FwW2uXaGlU6X1fPMnQNONSLVcYkzC3qupET4zXz%2BwgVmH23xpH0QFv1JX%2B1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7579f9bc42c6f50dbdce8a72042efbc4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda4890bda90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"data","md5":"9b7c0834e2c2af3f7403f491ad52e9ed","sha1":"58e09a90d2dbf29859cc845a46f57c9211827431","sha256":"0f3760993240c88f997ca69443b77e6c474a1f7cb905c25491b90c053541f54b","sha512":"f0d563e667f6e205307844132ea21d6f65e6f7e773ed9dff96022784832921f040c8645e29c36126a38372515fb8623e7998306d2223655be098d9da68e651f1","ssdeep":"384:2Ku4PYNXOrwlLASZ93DeioA892jX3Pp7AFrLm4:dYKFSZNvoA86fp7oXm4","tlshash":"cd524a27c7a9df587a1473fe5a1207c8cdb8da901bac181cdbd6b250dead0a4895f602","first_seen":"2026-02-13T04:04:14.147622Z","last_seen":"2026-02-14T05:50:01.986379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://krak-qr.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 12:46:17 GMT\r\nexpires: Thu, 11 Feb 2027 12:46:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 234202\r\nlast-modified: Tue, 09 Sep 2025 18:38:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29672, version 1.0","md5":"39357dbe8984618163ca98d144638fea","sha1":"3c5f9d8066bd583aabd676a861172a5297ea6e4b","sha256":"327a37fa78452e54fe5ecfdb3039f611080c4629244198faff8384ad4fc5a48b","sha512":"24c0cab0a589f8bbcc59fed31a87dc1187371a7d46603f80b76b9d453e350a3e35cbe7fac080635961e90859837b42285b0776bd0492d16ca1fbf12e5b97f74a","ssdeep":"768:lBIIE2FXroI4UZRppjb9Y5mtKR6klfxuVyDfdLnAUbN4x8:lBieHjbW5xR6klfxuVyzd7FY8","tlshash":"d1d2e18c85685eeff70196dd18131437c91e3649f78def60c5842bcac1f936aa2a5c78","first_seen":"2025-09-12T02:44:04.646948Z","last_seen":"2026-06-07T08:11:04.36977Z","times_seen":2101,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":81,"dns":1,"connect":7,"send":0,"wait":9,"receive":8,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/favicon.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15502\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5a748da6ee60630bb861e54c6901ceaa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fT156PWzXALZT9Bfje%2FGdZmQ9MHZxIrc4vBMRcG%2BmEBXmFAUHZKi7ytdpvYlUiCyUT2VZtHbai8DVINhTli%2Bumm1ZV%2BTDsJ7Ohs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9cda48933de50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 433, 8-bit/color RGBA, non-interlaced","md5":"06ef92b689fa080cb0d67fc8a7596abd","sha1":"326a828f813a2bb14e9faea420ab7fdda13b1227","sha256":"a3da9dd1f9cc99b132ab6a154a348719959d07c16cfa816c03158914d50a9ce1","sha512":"4c1fa11fd26c0bd6964cd15fb9cb65bd42f2de6e469ca1f4f2547c5e795a8022f925a4dfe0ec3b7d6a1a053f89bf8c8992de0363ca8ed5a71f57e61c04a386ef","ssdeep":"384:+9MY72N5zXwV4E7YZui6s39yllcjutkxPeNVA1MBNsUr:tY7oW4EMZui6U1jJPKVA1sZr","tlshash":"6362d0bb9f0196bfd19670f234dd08ac6ddfa507ca89090fbd36c348478e9282666523","first_seen":"2025-03-07T06:55:47.217759Z","last_seen":"2026-05-25T10:15:58.345706Z","times_seen":203,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/styles.css","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbB4GhFEeTCYgicsTnxpAkmQSOc0Mtn13XSNXCppNqxPB7zVn0fsB7mlTw3njIMtaenEfLh3CDkdZXawLr2S%2Bs1Z2Ih89c1KhLI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b4f0c4ddfd6b6eae30fa6a42ab4a78af\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda4890bda70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2985,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"09ca72e7d79739b9d9ae0b67e563edb0","sha1":"4c35c4f6e980c9015129716d048b8f1b1dae89d1","sha256":"06f63d1f0a52602499f397709fa02a8abfce086eca3b6e71d4981ca4e0d932ca","sha512":"445cc517268fffd617ef12d304fc14733b8517ca8fdfefb12d4d5b789e61b2ccd08bfca961d5feb5f98e2d38e4972de859e625d08239721f25bf05364727309d","ssdeep":"","tlshash":"9251c4ce7ba53205ac43d4587ca25715b2bad047a10eddb919f0307cde853d55ca23dc","first_seen":"2026-02-13T04:04:14.282627Z","last_seen":"2026-02-14T05:50:01.988449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/world.svg","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/world.svg HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWsNNf2MbHiCRZUz69YydS%2Bj7yzczIx3cGxBMZLoW5Mxwlvik2O85icBf0IpyEhMajrhfp%2BoiqG8aMuJLBVUIrxqPlJDgNg5U%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d31be65abceb9cdd956609f7c2fa2669\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda4890bdaa0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1742,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6037174431df767bc76029d6f7d53827","sha1":"4da9d4b87ecab82a7591fe69fce7a18fe03b7e42","sha256":"a8aaf7292f068e487c90a35526e52fc9c19df1ba26a89b0918ad6bf8eb115d35","sha512":"456089cc9a9d0a1c4d1eed6028aee8b675b51f8894a01a3b203dbe98e5f1ee077f6bfd2db0309369e382a2a7a7f66c83ee9e12001344ed89252642cbd77821ed","ssdeep":"","tlshash":"9231b1b697f0d2d0990ed7dcb6b2e8723e1325fa5f64ce98c1b18af4d61200d4486d51","first_seen":"2026-02-13T04:04:13.851803Z","last_seen":"2026-04-09T06:27:42.085703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/pyx.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/pyx.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 108219\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"39700a27f6188d4b7b5fc45eff35ba49\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1c6t3jxfJgeoyDuycXoEXp%2FAaJUO4o54d00dKJP8x7SZys0cQitv090wvmuiNb8c5XGWLOtH%2BGd5SnjcvPD8%2BdBMoxQAr70SmtI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4890cdae0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"732e49132c3e74810bc1ebd82c03913a","sha1":"92eb1089e8566fcb590f8230847bface017234fb","sha256":"749856ea97fe8103bc590b678a92be2a9e5d8b17d2eba84250fd7b688f404b1f","sha512":"f5d27d84c3bf2ab7151af198bdd492e30221ab2a115e67ae60c1b362461346f6c84da0e4d53a3f99bb3af776990c4233b642738883aa52cf782e3b20e9d741da","ssdeep":"3072:56GNua7KTWUp1vXx1CMiGV3mGeD2c3n3jQ9x7Zp:6N/x6Um9D2KExFp","tlshash":"2fb31218cc495af1391e2a450ace6c32492725125bbd44c8fb3dedbeff68d8a6c5c6c4","first_seen":"2026-02-13T04:04:14.307418Z","last_seen":"2026-04-09T06:27:42.077627Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/down.svg","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/down.svg HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iPH4XAXFtDKCPziGO9QYsJUGY5%2FbOVkw7etlCmzqUvQT90HpjLXmF5OimfPMIKOBFj%2BIY1%2FhMFx9Iotvh8jf5PLL1A%2BoUbIoF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"807bb33670cffbb16463bed48c575edb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda4890cdad0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06185d0924edd04a18d2bd9f9d712f45","sha1":"53115d05cfbc88432db3ccb544d4b2bb110d692f","sha256":"9eed6a9dd78c4e06d7c35d45b8f713d25ece4559bf3de693c08d41c9dddcd01a","sha512":"8cadc0c0d2e6a7502e5e08731b1afe392cbea6c61fedf42413811eb7c6d068b39ca0cdb1abab81f2d5e98f48f62cd14200d033e298065f0fada55f87ac5e9801","ssdeep":"","tlshash":"11e0f15150ae7cf94d080b208b2c90d635fe90aa7189004c62c093d1d604fd6b5115ac","first_seen":"2026-02-13T04:04:13.92578Z","last_seen":"2026-02-14T05:50:01.990891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/favicon.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15502\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5a748da6ee60630bb861e54c6901ceaa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fT156PWzXALZT9Bfje%2FGdZmQ9MHZxIrc4vBMRcG%2BmEBXmFAUHZKi7ytdpvYlUiCyUT2VZtHbai8DVINhTli%2Bumm1ZV%2BTDsJ7Ohs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9cda48933de40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 433, 8-bit/color RGBA, non-interlaced","md5":"06ef92b689fa080cb0d67fc8a7596abd","sha1":"326a828f813a2bb14e9faea420ab7fdda13b1227","sha256":"a3da9dd1f9cc99b132ab6a154a348719959d07c16cfa816c03158914d50a9ce1","sha512":"4c1fa11fd26c0bd6964cd15fb9cb65bd42f2de6e469ca1f4f2547c5e795a8022f925a4dfe0ec3b7d6a1a053f89bf8c8992de0363ca8ed5a71f57e61c04a386ef","ssdeep":"384:+9MY72N5zXwV4E7YZui6s39yllcjutkxPeNVA1MBNsUr:tY7oW4EMZui6U1jJPKVA1sZr","tlshash":"6362d0bb9f0196bfd19670f234dd08ac6ddfa507ca89090fbd36c348478e9282666523","first_seen":"2025-03-07T06:55:47.217759Z","last_seen":"2026-05-25T10:15:58.345706Z","times_seen":203,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:49:38.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17aqMV4jrHnjv0E0VPAToG184vTRWuFYCY%2BmMWy1NghdDB8unkJiBjdNzXpzKjYRMG7snABZeCy1zsvjyP2L%2FuQ362mlxFwA0vM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cda488e9991b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11420,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (668)","md5":"1de69a281f4ca2f3f8f61e6fbdd1101e","sha1":"9abdbf18804db9ca846d18dbd440f8a2a3f064b2","sha256":"9a3856a2039a8ceba6a64cabb40164cb06dd0303f661ac18334f756ef97eeafb","sha512":"5b65b4b93e9834d9fe0ada7046b73041f858456b9803cd2ec3b2a4774029b1e1336e2cb296792c438dbc0edb8158c84e6a63eb2058e80eef8bffa14639b3fa0a","ssdeep":"192:3QfsA1CfUODusmEUnpa3fhfGKHySKgvZIPp0mDg9/x:A+UODFmEUnpa5GKH5KsePD4","tlshash":"8332565156ea24e60102e056e915bf0d7ef6417fbf6a971131ac19af3ff2820c86b21d","first_seen":"2026-02-13T04:04:14.341609Z","last_seen":"2026-02-14T05:50:01.991725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":42,"dns":28,"connect":1,"send":0,"wait":176,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 05:49:39 GMT\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-06-07T08:11:04.367316Z","times_seen":16392,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":75,"dns":0,"connect":8,"send":0,"wait":22,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/logo.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/logo.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10324\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c54c68f0aeee8234cfdf07d5cb55f966\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fu%2B5%2FKucKOupU8xY3Q26NLl%2FRTC6fMipt6n5FexxidmM6bkfeaFoY5gXIrPgi4FKPYp3IEmWfzmjaA2sIFV5%2BHv0VV4HXJQRGbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4890bda80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 886 x 607, 8-bit/color RGBA, non-interlaced","md5":"61ae984f8cbf293e8959522073eaa9f6","sha1":"198317c82cc9c110944b1654189baa484606a9c7","sha256":"45528099e953f39a3c858d321f4390a0d6fa4d7769cd6ecf29796994377f980f","sha512":"7a0ffdc2d31b563402b1bc0b79b65fbc587e673cd2a1b5ea2869b247812e8b87b199b845439403e89d2f0208b79cb7dc0efe7224e5514711900be01e289b1811","ssdeep":"192:yFXewzkrGabSh7cQtWSFs0b5Jc2PSeK5jM5KoDi:GuwYrrOh7cQtWsvbSeKC5ni","tlshash":"85228f5ee871b5dae8dc9d3234f14865ae27445acc458dc2728f0a092f25fa61e931cd","first_seen":"2025-11-28T20:25:30.593199Z","last_seen":"2026-02-23T20:30:26.395745Z","times_seen":9,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/copy.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/copy.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9045\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"83e5a688c19d37c1500219531579709b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BR4gv7Z6Gqlw9%2FBv3p3U%2FQ1ER8kBNIObe2ttxV3Lj2tBTJ0jt964iK18viBq%2Fe76t9MtikF7jEy6Dk2H248ZFDVs8k897gxdYU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4890cdac0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c51c1f7524be48380fe395bc4fbf7657","sha1":"2a2e26317a31f2bbad30ba16f9289c694ebd5f3e","sha256":"3abf48d0ad80c986d12b38808656d18b274ce2c9992be88df9b57d244bcda73e","sha512":"ad13cfae8ff26b264b5c184958fd6477a4d01bb6f155cf13bde137b2dff49b2f893e91742bb15934b681131b039a63545caa4faba84004cc226c03c479654a22","ssdeep":"96:x7DBZWtD/Gi3ZdSj+N/68Vjr2Xk0I2suCmat2ww5abHS+mO9Z8x591TKQQM:xpOXSj+Ni8hr2XkiyTPLS+mO9WJ1l","tlshash":"6912e6c2c35116e3d2b8d7b624d71a01e866c420aaf35f02bfdd48ad6fa73742501bca","first_seen":"2026-02-13T04:04:14.395451Z","last_seen":"2026-02-14T05:50:01.993782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/5t8ovqm4ctqm48tvq598tcq9m8y356v8ou8xw4tm994mt9qmctmh9vtchvh759e0t94ttYm97y.js","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /5t8ovqm4ctqm48tvq598tcq9m8y356v8ou8xw4tm994mt9qmctmh9vtchvh759e0t94ttYm97y.js HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/54vw6o8m68c54c844896c3498vh634mvmcm48cm3jt4093j4tc9j.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO1Haf1htXUWHAJV%2BpkfoL7BrcKeK9aDQvxuYK7SaFOS5hbWIDiXsDE9Uqp7Ccnvg26DwRYZMFv5kPkXNT5Dgsy3eyPva9wpUQM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ed200689c7e922985e59a95e408cb18f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda48913db90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (903), with CRLF line terminators","md5":"3134ad9e093ec073e2b0c02a27fbb546","sha1":"a3ed58f99f740aaab63f73f484f9d28dc54955f5","sha256":"caae01d4f620591b48f3501a3cb17f075783dd0684a42fbddce5eb9876d529f2","sha512":"c5ff8d4f9a6e9b2e02250e772c6785e356309e6e630f966ab08831b3b07b056525f2dda4f8cf214817f4a2acbca70fc5068eda13645d0d065f25aef5e4aa36de","ssdeep":"","tlshash":"d66175150c9621806339a7abbb3b78c1e6278a7f0280658b797db550eff1959ccc2f74","first_seen":"2025-03-07T06:55:47.268647Z","last_seen":"2026-05-25T10:15:58.344127Z","times_seen":186,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worker-kv.cloudkra1.workers.dev/","fqdn":"worker-kv.cloudkra1.workers.dev","domain":"cloudkra1.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudkra1.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:03:58 GMT","end":"Sat, 25 Apr 2026 03:02:36 GMT"},"fingerprint":{"sha1":"66:B9:9D:43:2D:1D:97:6D:96:B2:DF:36:81:43:04:DC:C6:D0:DD:7D","sha256":"FE:0F:C7:64:03:72:63:10:59:86:A9:55:DB:EB:45:FA:3C:72:54:25:43:1A:8D:B4:AF:84:E6:DC:2E:3D:9F:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: worker-kv.cloudkra1.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nOrigin: https://krak-qr.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7yRMERtb5cMy3PZ7i99XJ4VFYkjZsapUhLvRp3Q9Ai5bpIHXJUERv4O0uhpdLX1FST07gN6o0kZAgBOiB7b6iCyISRHF3TTr3SlUMl0LnPPnmA9Pm9YrivUbKsRnFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cda489258330883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"93f08d400b6a394d78967f226e8a2e46","sha1":"4f135a70bb54535a3ec08c4cc67148a785ae46c0","sha256":"5da1138559912a3ec9edac0a9a3a2c6475e66d59954ea73282d17e8a529c1c9e","sha512":"f41d4d241bb93f3ec5341de9b390d751ec6962733fcf086c63272280c0341221e23c1322f3fa337089164181ac6c31cca1332b438ecc593a469efc7880a25487","ssdeep":"","tlshash":"2e31ac9f36d4e5ae4b357871860a7538e4ab69bfeee13852c1c46e0534b3ff08021476","first_seen":"2026-02-13T16:21:31.641324Z","last_seen":"2026-02-14T05:59:57.904764Z","times_seen":24,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":45,"dns":1,"connect":3,"send":0,"wait":99,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"worker-kv.cloudkra1.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krak-qr.cc/image/tlg.png","fqdn":"krak-qr.cc","domain":"krak-qr.cc","tld":"cc"},"ip":{"addr":"104.21.21.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krak-qr.cc/","date":"2026-02-14T05:49:39.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krak-qr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 11:44:14 GMT","end":"Thu, 07 May 2026 12:44:06 GMT"},"fingerprint":{"sha1":"F3:7B:A9:66:43:95:CB:0A:BD:64:3D:1A:51:19:5F:42:C7:FE:95:FB","sha256":"66:98:A5:E3:A8:3E:AA:09:29:C0:6D:23:4D:E0:03:FF:C6:41:7D:A5:C5:07:90:E9:D5:03:C6:D8:BD:F8:91:CD"}}},"request":{"raw":"GET /image/tlg.png HTTP/1.1\r\nHost: krak-qr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krak-qr.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15870\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"56276c2d3ab8d1c6533c5c3e0228f510\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6xvm8E%2F9dshE3mJZU%2Ffo87C00Z%2BgCPGhZ%2FtILs6qcD5sRG36RCmUXN8eAnUmFRG9kIdTnnZ74ksSoP8tIx65eXjnOC6Tx%2Fvqy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 05:49:39 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4890cdab0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ef99e0c53dd33abeb77420a4e39b1003","sha1":"a698bdd523b4c0d9b1177e15c6a1ef9a0f7421ad","sha256":"22bdc8c7276d1665c81235cc2799aa7fd60dba7b39cac496840f8bc45245be83","sha512":"32d9911bb57362ce0016879fc1dd9323b61e05a6a5f361b89acb55c66d7cfb1f148bd6bbf672f2f245f3969e86dfb52857851075817113af9b8400fd225b8221","ssdeep":"384:nbFP+8zj11V9ZDnWRFKVZ0aYQJMUt3K2RpIjdUD:bZ3zj11V9ZDnWjK30lQJMd2zIRUD","tlshash":"c862cf26ecba39c5636ff89014c39869409355473902d9c2b87e4e48ffc029a8e872c3","first_seen":"2026-02-13T04:04:13.863667Z","last_seen":"2026-02-14T05:50:01.995708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krak-qr.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}