{"report_id":"7953fc81-09eb-47da-b328-3e41837282a8","version":6,"status":"done","tags":[],"date":"2026-03-28T23:30:33Z","url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"172.67.181.210","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"title":"Kraken - маркетплейс №1 в даркнет сегменте рынка РФ ⚡️ Официальный сайт Кракен рекомендует вход через зеркала в onion и клир зонах","dom":{"size":32283,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1587)","md5":"883337f9f1dbd3619446bd93a3d7f93d","sha1":"696ede662c5df534a53ebb6fba443b5f4b4fbca3","sha256":"6f3faface1d5c4efbe82763afe36959cecf2525e42157d6eecf503dfad115911","sha512":"7cafce520dc3dcf0ea342ba8c9d0ba70b12b97de6d8e80b7db0e073b9d538647368d111f0739208c2e79c4f77f20fc85806fe73483ea5c149c73a4f131a8be0e","ssdeep":"768:gic66N7sZkbcz4466N7szx9KYOHNM36Z2Sug6AbS2EYro:gic66N7sZkbczj66N7szx9KYOHNM3z/V","tlshash":"cee25420958e2cbf01015093e8047b0d7cdb9dbefa77961631ff596e37d2d20c62a66a","dom_hash":"domhash2d660acebf5db3aa89b38d9bb993f909","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"172.67.181.210","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T23:30:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3579843,"first_seen":"2026-03-28T23:21:28.025156Z","last_seen":"2026-03-28T23:21:28.025156Z","alert_count":68,"request_count":34,"received_data":2339815,"sent_data":18099,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"maps.googleapis.com","ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-03-22T23:46:24.366307Z","alert_count":0,"request_count":3,"received_data":451215,"sent_data":1550,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/map.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3cf0b72980cdee7a977a9f09e1eb313","sha1":"f86da45a195de3557b271cd74003edd3c832949f","sha256":"e73e74460bad5b8267827cefee76910c349c9d1e2ddbac71ebf82868b1a2421d","sha512":"3b64fe847c678657d2b8335079fa917744449f0aff996592a1077145edde41d29447b54d38a73dd986f989373960d6871f6bc7d287078e20c1899f6ecb2b4db0","ssdeep":"1536:fzV1a87buDLATIJwyVmABuBqX4joMQvthSpq7axeK2cc6+Ob+PDc:rVg87bugTIxUABuBqXWQXSplxeUc6+Of","tlshash":"62731864732220ba5191d5e4a43b054d6069e465f008cabd3d3edee7dbf488732fab39","size":76886,"data":"","first_seen":"2026-03-28T23:21:33.973659Z","last_seen":"2026-03-28T23:30:36.664811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/common.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2140b519fbc0b883a762309ab732a391","sha1":"63aab961e817a2c67f2567d6d9cc358f071669b1","sha256":"3f08673794a8dfbef2ce6d0db7ddb273e6dd6607f3e38e35f4ec00a81f13221b","sha512":"0f49da573e255ab62e2ed35e3dc282dd08119365f1b97fe9b5d5b84b63f5e05912e75cff2ef6da3fda9c37986d801830d73cbce9e955b1ea0fc28ea94f4feaaf","ssdeep":"6144:8kYWcPXCBndXPCuN+CNgYCsGsRtcZafyAyxOpvLGpD/sMypk6u8B:8kBcPXCBndXPhN+JYIZafyAy8pvLGpDu","tlshash":"0144a56c7132af4e6832c853c266310de0353edff96498bdbef65594eaa5948f0e0634","size":261616,"data":"","first_seen":"2026-03-28T23:21:33.943217Z","last_seen":"2026-03-28T23:30:36.63719Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c3a8d5bf79a2b2c25b4d9f99fbf6db2","sha1":"481a2ffd3f04c9bd3434f2798f3cee263b0d90a2","sha256":"229e46dacf0660ed1687a853b0b9568e1410c92164579337336c83fc591bd4d2","sha512":"039e0fde5e2ce5d2c9109b0e9205b0c7a6be69a0bb17e8cf9c7002564f6870252e32abba0c976c0cf325d4a3071cabc8de37b8c12a777a0fd1026361ba9073f7","ssdeep":"6144:vtah6/a+TCtrnTz+vbaKYmDezK8iB7aVFyAGPL/1bK15IPfMYAAI1vrnz:imaKYmDQcKFyP2cPfJAAIBrz","tlshash":"9844b5d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","size":268038,"data":"","first_seen":"2023-03-07T12:21:04Z","last_seen":"2026-06-08T22:37:18.773922Z","times_seen":1193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/popper.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"068d64fd1715635226e7a4b91017c6cf","sha1":"ca344d4feda098dc568fea9591be7beefcc6b2aa","sha256":"072214cac2642148ff8266b18c82fdc64428932369da84dec0562cf01ca58d32","sha512":"ccf6b0823e1b6be6a757b9098d3b799930c54616596d430a8cb9d758d1a8802bdac519aff8a6fc812140ed9b0ee80775ffe96427e550be7108036cab46334635","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnME:T17bd7iq07ftxivbuzGQvBx1jknrTcbi","tlshash":"ff8282dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","size":19032,"data":"","first_seen":"2023-03-07T12:23:39Z","last_seen":"2026-06-08T16:49:28.312246Z","times_seen":1261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/onion.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aefbdb71ab1526a1c6a44f1db6da1d3c","sha1":"66f6d422978a123fdd70aed6095cf1d0b600c24f","sha256":"b32cd6c81943a42a2ec6ac43506e7afdfcccb6461a3cd745a52f9d296521a543","sha512":"732d57d2d6115571b8a56ed24db58ae00b771708f905277da1f82ab6d691759b13e30afd38caae0a1588071fc5275fa7aa9906946548af80e46b449c8bb1917b","ssdeep":"768:RlOnVfwcpAYkFXnaM6VLiWdrDZRZ8W6gqXCkLRketrioRcQDrRhVXo7PtSO:kpHLiw","tlshash":"8ec2a36c76923093d2a3b6b1517f100eaa3e6496f44449ac74be9dd27ff408a2176f3c","size":27387,"data":"","first_seen":"2026-03-28T23:21:33.932356Z","last_seen":"2026-03-28T23:30:36.612458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d298c36283795f89d98d580ea3180e2","sha1":"b1df03b23a0d066f5f74491937ef07f636c2b3d2","sha256":"1ea22eef94d6e15182a43e5c77ca4a37d22ca027a9134fe6c455ab2dd5944e87","sha512":"742326c6f4304d35b70e2983d0f23e39666a655075c868fd71633cd19269d6c4a5b97c05489a27bff924d6a4589d8d50c60e314d7732a0d993a5eeef462b0384","ssdeep":"","tlshash":"f3f041e73c890438c3b302e93b7392883439293fb40eac12b90c18563f80e6554a790c","size":621,"data":"","first_seen":"2026-03-28T23:21:33.982326Z","last_seen":"2026-03-28T23:30:36.66536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.animateNumber.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c46a5138afcd0ac989037e5bc908bcac","sha1":"12a8dd3a49fb07fb906739626d9157e73d1789c1","sha256":"18201e44a097144b4b4d9fa01b548222bb46918ab5cd98cc5e48fe5d414d26aa","sha512":"598ecf8b3d93c188e42e5831c3d0ce3707f98b150e0672f71a8f8549da91c612a53aac7d17e79efc9b1a6e55fce1804f2d0cd43c9b19bd5f3cb3c60e2784bf50","ssdeep":"","tlshash":"14213158f36d124b5a222631433f6947e9aa68c4ed92b11db01074964f3798e22ffd34","size":1391,"data":"","first_seen":"2023-03-07T12:23:39Z","last_seen":"2026-06-08T16:49:28.310846Z","times_seen":1224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/google-map.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99ff50f423bf5fb9c0a31a0e35042fb5","sha1":"f89291c1970f4c4e0e81ebd05b0a970ded24c3be","sha256":"08a28edfcfdc08d190f962ae577e75800af2c38968d7ec070aafe2751919c10d","sha512":"9f3db64a2821b8d828ecf55c2618a960f7f28160b2deeeaa1ea4c5dec864983727b63afe17d5ed48fc53a844e2127f808fab9142c03e097275b5b1e472564f18","ssdeep":"","tlshash":"6161be5fba165047458be1b612cf064525b041434788ba9bb49c83bc5fd9fa87449bec","size":3228,"data":"","first_seen":"2025-11-10T03:22:25.565941Z","last_seen":"2026-05-10T03:18:07.881132Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/owl.carousel.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-06-08T18:21:36.192154Z","times_seen":18889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/util.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53ce8da513cc7ebbec868cc5b1a24fa0","sha1":"c7cfdaa38459a4556e15f0bb6c7d0ee54e550076","sha256":"5a36168eb4922a8adc227a27a63b2023db4d9aa6f2a4590f2abc87cd612700ef","sha512":"c50d945b71121b36d80f6fa289e3b4d22278aae378ac9a63bd08d15bf0f2c0ea7d607fa4d33625e6f1a5a28f663dc4822845fbd81978f9c6f4768b1e54ae79b4","ssdeep":"3072:WTVYaNbEepT7smNDae6ecQhIh7BM5xshDlfC9jS3lqU+tXqQlgeFLlaKHuz1p4Qm:WRYaN0e6ecQhw7BM52DlfC83lqU63CeR","tlshash":"72040d643252706782a6b8e5143b104ae57a9856f408cc7cb99dddd3eff189930faf38","size":187327,"data":"","first_seen":"2026-03-28T23:21:33.956132Z","last_seen":"2026-03-28T23:30:36.611811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.waypoints.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ef3dc306be44a30ec0d0ffe2bee109","sha1":"791cc9899f0f4dc57ace616780448da4763f05bc","sha256":"114484b6bcaa6c2e7ac8301929d6bcda18a7f71924a835c2e6c01fdbd6421f5b","sha512":"3c917d2ac0757319ea15b927a155d080cb169df512a03ad9c8e57eeeeaba6db72f4cffae604de7efdc369386e6684c7fc596c83388866a5c8d6cd4020fe8a702","ssdeep":"192:mwzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:mQoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"6b026189750534221bdf90fad91f474ab337582ca80680bdb4c8d4ed28f252d676bf7a","size":8835,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-08T21:18:17.635015Z","times_seen":1789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.easing.1.3.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cb90c06cfc2084e0e11ca2b8a10f6c9","sha1":"45144c119832bb70b1d0e9708cba1e007ee9fbec","sha256":"11c19392554c9b78c15771afa8f9fbfc78e0e46ca9527831f90ae41f95da73b8","sha512":"3296392a63afc82458dda56b2102d7db5742c8dcb75f4f0915fec0e487fccd85e0c4ab4bc8a6481a535052c44fcfa0cee08924701fafe83eac304aff5e828351","ssdeep":"192:pw+Or8ur83V33R3hqRAsfAy4DOr8ur83V33R3hqo:qZr8ur83VHBhmFr8ur83VHBhL","tlshash":"def1038963c0631b4359f270aa3e5e4ff268642b566e681fcc5c5084bf7d339c27ad68","size":8111,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-08T16:49:28.291938Z","times_seen":1631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/main.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b288a370f318bb8c2072f2379b3735b0","sha1":"c86f55f04a2a06f71a3401f3c2138a1ba7c2808b","sha256":"7619c439520fd837fc1fd58de113c6588b434690b3b8416cc5124884cd90267f","sha512":"278749fee4c9319f7d9281170a4b919bcb445b941a7e3f5b944f2ceb4d7b1fa247105af3295819df444fd7821baa149acd5601a486a9e356e9dadd3e4a5f0d7b","ssdeep":"","tlshash":"e571add1f7bc305205bf31ba486f24cc193c10b2d805156bbcba56982a9627d3b7ad2e","size":3480,"data":"","first_seen":"2025-11-10T03:22:25.566594Z","last_seen":"2026-05-10T03:18:07.881725Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/js.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b046bd8cb821a14facff922dc1305fec","sha1":"613091652014554f5684003ac180573ae3a7f6f7","sha256":"1f242d6dc02dbcd6c2b466f1998d30cae1964fe20ee7320ae349d42cbb415d51","sha512":"a561776d4e2716b1edf28f8379117db93d9c2f90b3c6911a211edd380b4ee7f865bdc89f964ac72136a612bd1364516f9b48d36b3f40592694473defc0e372aa","ssdeep":"6144:ZAKstYafT97XXWs6jJ/M4emOJ9tnVs99MubJGTcqwTjcS5+XR:ZAKstYafT97WLjJ/zemEtnVs99MubJGh","tlshash":"2a14fa95766270268392e4e4603b100eb23e54adf04889ecba9eddf3eef14491577f78","size":197606,"data":"","first_seen":"2026-03-28T23:21:33.970715Z","last_seen":"2026-03-28T23:30:36.643227Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/bootstrap.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baaadea4492b059f284187d75af46063","sha1":"7326bf5e023f871afcf6ebb18cb89109f81a7708","sha256":"0e25895d7caaf355a53d19c37c69a06198f668e5422b211d27597ed93983b80b","sha512":"b56367cd0554d9e5d12103e2be34e304433b898db5d78439a4e04845168e413d90875024e3c5583cde3ed8aa68989a5c7ab37aa51163e65fb72e7c50d1db587d","ssdeep":"768:bVCSRfsdjHVpcKc2v5dTq7gBaBIzySppHcWFcXPv1mAaCcE1dLPmdwGmo:bVDROhicBaBD0pHcWFcfv1mrCcws","tlshash":"d633970a725474a202df6475917f050bb33b285de60a90acb99e94fd1ebcd8c7267f38","size":51143,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-06-07T10:43:39.780108Z","times_seen":3873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/56/5/intl/ru_ALL/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2140b519fbc0b883a762309ab732a391","sha1":"63aab961e817a2c67f2567d6d9cc358f071669b1","sha256":"3f08673794a8dfbef2ce6d0db7ddb273e6dd6607f3e38e35f4ec00a81f13221b","sha512":"0f49da573e255ab62e2ed35e3dc282dd08119365f1b97fe9b5d5b84b63f5e05912e75cff2ef6da3fda9c37986d801830d73cbce9e955b1ea0fc28ea94f4feaaf","ssdeep":"6144:8kYWcPXCBndXPCuN+CNgYCsGsRtcZafyAyxOpvLGpD/sMypk6u8B:8kBcPXCBndXPhN+JYIZafyAy8pvLGpDu","tlshash":"0144a56c7132af4e6832c853c266310de0353edff96498bdbef65594eaa5948f0e0634","size":261616,"data":"","first_seen":"2026-03-28T23:21:33.943217Z","last_seen":"2026-03-28T23:30:36.63719Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/56/5/intl/ru_ALL/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53ce8da513cc7ebbec868cc5b1a24fa0","sha1":"c7cfdaa38459a4556e15f0bb6c7d0ee54e550076","sha256":"5a36168eb4922a8adc227a27a63b2023db4d9aa6f2a4590f2abc87cd612700ef","sha512":"c50d945b71121b36d80f6fa289e3b4d22278aae378ac9a63bd08d15bf0f2c0ea7d607fa4d33625e6f1a5a28f663dc4822845fbd81978f9c6f4768b1e54ae79b4","ssdeep":"3072:WTVYaNbEepT7smNDae6ecQhIh7BM5xshDlfC9jS3lqU+tXqQlgeFLlaKHuz1p4Qm:WRYaN0e6ecQhw7BM52DlfC83lqU63CeR","tlshash":"72040d643252706782a6b8e5143b104ae57a9856f408cc7cb99dddd3eff189930faf38","size":187327,"data":"","first_seen":"2026-03-28T23:21:33.956132Z","last_seen":"2026-03-28T23:30:36.611811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/love.jpg","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/love.jpg HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Feb 2026 14:48:44 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6980b94c-23ff4\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjTLHhccVkg76zUGydAEqergWWskOM0lQYe8QAJdv5p2LbY%2F6ajQwzIGyQtuli4Xoj6Uh%2FW8Ab7IhTUhrD2Bnm%2FPSqXGmn9JgXezbD%2F6oja0BesPP%2B1kDOlqhVoAQn7cmgWHmnVKIqK6d2%2F0jNKU1Lanq2piawkk%2F6TEMcOUL52Vv2AlGx5yWeJQXijX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efb756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"9819d8551a0c9d0ff96f87adc514c194","sha1":"8f82b9ee42ffc852efa373609752ee35309c0d3d","sha256":"cfa99e73278172445c0a412cc974569e47fac3fa3f3243d096f047d8c3a507c4","sha512":"06022032b92d455395555531af5a7d4122eb61c802ce70b12d33493f61651b64429f3540b160fee6a976a38dc8644f8b0cd2caaad6d102bfcb78586efa4aac6b","ssdeep":"3072:0QMETF4QM+Gm2NlZtit0ncGvldd5ZR02c++vAkQHTCl0JJ:7MEaQM+5t0nckzff02c++vmmU","tlshash":"71e313cadbfb31dccd4612f41228b1161cba7db528395d2748ad6c50f5e8cbae1a4f09","first_seen":"2026-03-28T23:21:33.95777Z","last_seen":"2026-03-30T15:53:36.955064Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/kr-tor.png","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/kr-tor.png HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Feb 2026 14:48:41 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6980b949-28358\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBjLCLGtZ%2B1mTTzzreGUGJuWAABTceOnXRrVNZngBq0MyoFhdhkv%2BN1fRHBBqmipCqrfJN038E5URJpgJ8llNOya%2F74cRoIkv%2FOWAll1wpFhnaZaBdMZc%2B3oaES6sLAFMlKSYW8pFfEULKSyaVuTHuKnxK7Y0fDJUYKypJHKrWH71bNLv97P6Jj7876J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efba56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1125, 8-bit colormap, non-interlaced","md5":"5a14f1d35d9c16984867dc639053066b","sha1":"69fb6ebf6998f2d74c6764629bab1e6e64143938","sha256":"579229560ece67c52aa91514ec5387fdbbfe224cefa902f2b2c52a861d323ebe","sha512":"02beba444dc3e1bc22a54d19b14eff871855bf2816722deb8c3ef94f09ec800b3baf9ee15da3a905ae2df57117609d89fc80b9ee77ec845442c9ec2c84943b1f","ssdeep":"3072:G/q3u5PfOKU2xk6D5PQyTq9KpNiOG2WfmTk+2vFisILcNmc:GtA6/h9Tv0+o+iUHqmc","tlshash":"b2f313b79a65f4d9cb84dcbd3c77c44a80713a1907cd2cfd9162a8897a1e60b6c098fd","first_seen":"2026-03-28T23:21:33.977534Z","last_seen":"2026-03-28T23:30:36.606753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:48:58 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b95a-41706\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwsQPL6SDrYJDUeS410cUFbjgFpdu63pdwsKwSUznUBwqJRC0QpHLgs28SaK2hsCk7bqzGl1F%2BwmD%2Fh35J8i2b5t40gxbTWQRFhcQAqjfuaYR6sUx4hfZktw3D9XHK1WuOafsF1XYvezn%2FsBRpWFgOnY7A0rFSTS%2BwezJS%2F9z%2FUXt5%2FAZxnXHR%2F4vIlb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efbb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268038,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"9c3a8d5bf79a2b2c25b4d9f99fbf6db2","sha1":"481a2ffd3f04c9bd3434f2798f3cee263b0d90a2","sha256":"229e46dacf0660ed1687a853b0b9568e1410c92164579337336c83fc591bd4d2","sha512":"039e0fde5e2ce5d2c9109b0e9205b0c7a6be69a0bb17e8cf9c7002564f6870252e32abba0c976c0cf325d4a3071cabc8de37b8c12a777a0fd1026361ba9073f7","ssdeep":"6144:vtah6/a+TCtrnTz+vbaKYmDezK8iB7aVFyAGPL/1bK15IPfMYAAI1vrnz:imaKYmDQcKFyP2cPfJAAIBrz","tlshash":"9844b5d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","first_seen":"2023-03-07T12:21:04Z","last_seen":"2026-06-08T22:37:18.773922Z","times_seen":1193,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.waypoints.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/jquery.waypoints.min.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b95c-2283\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IjMqhlxhncT46lLrrhlyDsb3mXN0Szwbm4A42%2B4T9ExrrwzN%2BG%2B4GG3G%2BvMUp%2BDscY0VxhrNYRH35%2Biop3MKtEKmooYh82XS3cNeMgU6C%2Ftrk%2BPWef9lOl9VEr5v4Y2JhdidSzwuX7ntZKF39WnXip8JtJtILguEnvtRAy%2BIs0dlOoCXSaHjL53ggWP%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffc056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8668)","md5":"28ef3dc306be44a30ec0d0ffe2bee109","sha1":"791cc9899f0f4dc57ace616780448da4763f05bc","sha256":"114484b6bcaa6c2e7ac8301929d6bcda18a7f71924a835c2e6c01fdbd6421f5b","sha512":"3c917d2ac0757319ea15b927a155d080cb169df512a03ad9c8e57eeeeaba6db72f4cffae604de7efdc369386e6684c7fc596c83388866a5c8d6cd4020fe8a702","ssdeep":"192:mwzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:mQoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"6b026189750534221bdf90fad91f474ab337582ca80680bdb4c8d4ed28f252d676bf7a","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-08T21:18:17.635015Z","times_seen":1789,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/cm.jpg","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/cm.jpg HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Feb 2026 14:48:32 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6980b940-60a3\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VHaICnOQS%2FyxMJvUrAGQnMZRiyikvCrSloGQSIpVjUKbdRFvQwniTzxhTUaTjgCtwQxeNlen%2FfCnE6Pkky%2FPtDayqCGc%2FkDD%2BRgBo%2B8sxwbP7J9FJxIfux9KLj7yyqtzLXUrhJb6T1y67PNelXEmBdkYvKOz56mJ4ESQnLqUd6UxNuiabKJNX9mAQYc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efb656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24739,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3","md5":"f8d4151151898b6affda94389ddc7a43","sha1":"ab96f680b32b51f9cf22060176859ffb13597419","sha256":"1648e819710ccc6d525c65885150128a933cb56b359942e8f9af31631650e4d7","sha512":"9c7e29c7a93cc11673d4b160d0d14c637ef833bc26b477ad5f95cb8ad38259b170aa7d0e03a8ee5e6a4e09282ff77364ebba7a472f9f2d50dce49853691e2f7e","ssdeep":"768:ho6cQ7BAkfre05xY000000000000/StaOSplWdO8vtQ:hogBXfrp82aOSplWdO8O","tlshash":"09b2df9d5f2dc5adcb7182f82ab239702700fd047aaade0a23c452c877bce525d4166f","first_seen":"2026-03-28T23:21:33.975478Z","last_seen":"2026-03-30T15:53:36.957579Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/popper.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:09 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b965-4a58\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIeuDhm0sL%2BFotzCHYo7CG1wiDqOHojWuMSUdK0SZMqk8wvhWNtcQCHjqrp5%2B9povbZL4fOTgRAfhGcge3l2p42RCmN8%2BJYBLmk3BtyrEABMdFj1ufNIkbgHVAo6rZL7XRmR4BuQ8tSjBITQW7WJxfNY3q9ypEZFAZo1P0wjRZC%2BRSxmW1e1rDBITj5c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efbc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19032,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18860)","md5":"068d64fd1715635226e7a4b91017c6cf","sha1":"ca344d4feda098dc568fea9591be7beefcc6b2aa","sha256":"072214cac2642148ff8266b18c82fdc64428932369da84dec0562cf01ca58d32","sha512":"ccf6b0823e1b6be6a757b9098d3b799930c54616596d430a8cb9d758d1a8802bdac519aff8a6fc812140ed9b0ee80775ffe96427e550be7108036cab46334635","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnME:T17bd7iq07ftxivbuzGQvBx1jknrTcbi","tlshash":"ff8282dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","first_seen":"2023-03-07T12:23:39Z","last_seen":"2026-06-08T16:49:28.312246Z","times_seen":1261,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/google-map.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/google-map.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:48:55 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b957-c9c\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzRW0P8i3%2Bb70dBJInhgi76iWkxGgKhHWATL2VtKq%2ByLoLZZAu3QUiGZdSQOS4%2BxubgIEGIgQP1BVCtLP1z6E8fAPy9o2gT7v%2FKVe7EzB88K4bJol8TA3fJV6koU%2F1b8wVC8%2B1oCbWCc4q%2F0Hom57YJTk632UapRD%2F69WbdP0fHgm5C5f6OQ%2FD35JklL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffc456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3228,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1665)","md5":"99ff50f423bf5fb9c0a31a0e35042fb5","sha1":"f89291c1970f4c4e0e81ebd05b0a970ded24c3be","sha256":"08a28edfcfdc08d190f962ae577e75800af2c38968d7ec070aafe2751919c10d","sha512":"9f3db64a2821b8d828ecf55c2618a960f7f28160b2deeeaa1ea4c5dec864983727b63afe17d5ed48fc53a844e2127f808fab9142c03e097275b5b1e472564f18","ssdeep":"","tlshash":"6161be5fba165047458be1b612cf064525b041434788ba9bb49c83bc5fd9fa87449bec","first_seen":"2025-11-10T03:22:25.565941Z","last_seen":"2026-05-10T03:18:07.881132Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/fonts/open-iconic.woff","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/fonts/open-iconic.woff HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/open-iconic-bootstrap.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: font/woff\r\ncontent-length: 14984\r\nlast-modified: Mon, 02 Feb 2026 14:48:26 GMT\r\npriority: u=4,i=?0\r\netag: \"6980b93a-3a88\"\r\naccept-ranges: bytes\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NMw0jvVks%2FLvkb%2FJYS6OTyBzfBFcX6S0erovkrGNpI%2F4aGd1ydakffZSUE0NW1z30gHRKTMOSApg3lGk8XljyL%2BJ1Fcu0peYCgc9uy9%2Fg%2BRtoCPmS2DJMmLa3uHzgHlC%2BEHU%2F6LAxPw3lNua%2FdQLXVnZmndCU6viyjgDgAPR7Qwkkey5ge8mAA1B5Ll\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd6dfd256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14984,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 14984, version 1.6553","md5":"3cf97837524dd7445e9d1462e3c4afe2","sha1":"9536808d830d8a28b4ca28c6f2fa8b1bd2937a55","sha256":"7193ea5654497d2356d0a690e3e50f39767fbff4335e57a3443c1435d648a1f2","sha512":"a8374475cd54a38f087bd22cafd9b694763898d4de67e73d1d860f82ec860d72ebffbd929158e70c10022cfcdf36ebd04379b59612367b21537e4d0fa71696e3","ssdeep":"384:CmOo1YmRg4IsAnWEXJEFhdc4Nc2yb7+J0ZE9/xRqWN:CmOo1s4I5L5am4Vk+fZXN","tlshash":"8162c0b611062cbcd2dbcebe990322532c59c1c0a5e27ba0025e848aede694c57de596","first_seen":"2023-04-06T02:03:00Z","last_seen":"2026-06-07T01:55:27.814271Z","times_seen":730,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/util.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/util.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:11 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b967-2dbbf\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqOi28u8HmpnszR3T49Ed90Er%2BpKy61whwwDzVKLINXarxBWdGe5azeL6%2FXPQjCjvWnsafB5S2MQT2n3f8WsM7GGDm4FyhNZLCrfH22WIMbJRN2lPFlxxIvEW9FMoqvYCM3vGommebFyJ8BFxLrhkfRgLWa6ysvgSSQgP%2FIqvdKeFja3kHNhdFBDIVOF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afb056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (562)","md5":"53ce8da513cc7ebbec868cc5b1a24fa0","sha1":"c7cfdaa38459a4556e15f0bb6c7d0ee54e550076","sha256":"5a36168eb4922a8adc227a27a63b2023db4d9aa6f2a4590f2abc87cd612700ef","sha512":"c50d945b71121b36d80f6fa289e3b4d22278aae378ac9a63bd08d15bf0f2c0ea7d607fa4d33625e6f1a5a28f663dc4822845fbd81978f9c6f4768b1e54ae79b4","ssdeep":"3072:WTVYaNbEepT7smNDae6ecQhIh7BM5xshDlfC9jS3lqU+tXqQlgeFLlaKHuz1p4Qm:WRYaN0e6ecQhw7BM52DlfC83lqU63CeR","tlshash":"72040d643252706782a6b8e5143b104ae57a9856f408cc7cb99dddd3eff189930faf38","first_seen":"2026-03-28T23:21:33.956132Z","last_seen":"2026-03-28T23:30:36.611811Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/onion.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/onion.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:06 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b962-6afb\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV4WAVgBSgeWuW6w2Dy2b5UUCtf5zU2gonA%2FhmQ827pq9i%2Bit3Mz%2FPv%2BtYdfi5wZG6tptwtXHSbowCSVRogJYHkKa%2BKJIWoHsXFE0IJ19LPxd7tF3WyMjAe8rbIRSq5HQtrtRFnfKFygJpe6fMGQzQHqskypEtLjfG4OVW2plUzAepM%2FKZPSMbC0kzal\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efb456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27387,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2778)","md5":"aefbdb71ab1526a1c6a44f1db6da1d3c","sha1":"66f6d422978a123fdd70aed6095cf1d0b600c24f","sha256":"b32cd6c81943a42a2ec6ac43506e7afdfcccb6461a3cd745a52f9d296521a543","sha512":"732d57d2d6115571b8a56ed24db58ae00b771708f905277da1f82ab6d691759b13e30afd38caae0a1588071fc5275fa7aa9906946548af80e46b449c8bb1917b","ssdeep":"768:RlOnVfwcpAYkFXnaM6VLiWdrDZRZ8W6gqXCkLRketrioRcQDrRhVXo7PtSO:kpHLiw","tlshash":"8ec2a36c76923093d2a3b6b1517f100eaa3e6496f44449ac74be9dd27ff408a2176f3c","first_seen":"2026-03-28T23:21:33.932356Z","last_seen":"2026-03-28T23:30:36.612458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/kraken-banner.png","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/kraken-banner.png HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Feb 2026 14:48:44 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6980b94c-5a92b\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=It6gUFhJpzr0xr05A8BYnPEGzSN3BRbCDKt3ZxLUl5%2BbiBBoLb4659rLyyhXW2WZv%2F0GETpHYX5q1UnkIWJmhsE9SrNrV%2BBZ38Ys6DWIcBbsnA6o3DhO5Cmg8B5kIewRXUpmfjkhegi68PS6N8FsNr4p78TL89ZzEMWF2ODKahQXeDE6ewwmE6uW6fIO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd6dfcf56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 800, 8-bit colormap, non-interlaced","md5":"8f63c05d9f8049b38b124eb32c6cb003","sha1":"404cf5522f6c302e5a74960942f70c8316c30fe0","sha256":"6e8f6d933555baf7c4c85464b51b3830d0b9e304af6e51037ce71bdd414064da","sha512":"c2cf18136e162f63e6913fc0d11320c8e421d0f05959fff95eda696ab6dcfa843d6a4a03b3eac7c4f0f6007f652526c317ca31b04c676f06f719848deaae9991","ssdeep":"6144:Jienx0s/FYlCJaPq7Zdqr6NOgUXtqAr8tWxDaftp7INNUwbgliUZkbABid:Jiqe2KlCJgqGnvQWxD6zTcCtZk8BU","tlshash":"9d842322f7341ca3d8425e27761272c0da85f07337ba4f9c4e25a5af79dc548ca25a2b","first_seen":"2026-03-28T23:21:33.951776Z","last_seen":"2026-03-28T23:30:36.625523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/fonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCMPrEHJA.woff2","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/fonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCMPrEHJA.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12564\r\nlast-modified: Mon, 02 Feb 2026 14:48:21 GMT\r\npriority: u=4,i=?0\r\netag: \"6980b935-3114\"\r\naccept-ranges: bytes\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFiL4pl%2BL4s6pyv7axeiBKg3uHOvUeonejRAg0CkHSlK3hMUtJ2yN%2F%2FDSwjgvwaqhqVkrPjFOj2ZbSKf%2FlQPPq%2F%2BVZC0JzVeQ2cG%2BV7R8rdzansTpQLKA0QOPdysIXo%2F9TkKyVd90tSh2XDxc64xQZEQS0OAneKXXF9lSzE%2BRjOAFrmGzddAcOyUXPSB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd6dfd156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12564, version 1.0","md5":"e2cf32650685ba429c0592d458181a01","sha1":"7572f0dc646b766e83f41d17d3175f11d3f1302b","sha256":"94799ca77fe8f69807b0423d72a34ec22a491cbd5771d656ec47fc7a3e99fdca","sha512":"52d0882aaabe42d4de589c7bc56cae8586df35ec97fcca26fd9c569558defcdc8f51c3c6f0013f010e35f4d0e4057cf7a695ed8ccfb0e6a59ec74769a1e2fc6b","ssdeep":"384:4B42NPdAB3s1YSHiEujMSCHDDRVr3lx0D0f7qFRa:4B4eKcHHiVCHDvTlaD0fOFRa","tlshash":"b342c01a1119b690d6b87e3b2241512f663737c0e213f5a256eb6d39faf0d08c4c7727","first_seen":"2023-09-19T18:33:56Z","last_seen":"2026-04-29T06:28:21.707586Z","times_seen":31,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=9\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-06-08T23:15:56.749195Z","times_seen":407965,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":104,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/favicon-180.png","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/favicon-180.png HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Feb 2026 14:48:37 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6980b945-694\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpG1r4FpfOOcDkw0ystSfZg%2B0nrCl6qhFM74l5aoHqBDenFZXw1zh2MKw5Qn%2BuwnPnpVcoH5zdw0eeaRaOnftz1cvrrSqTYlal2EyfdxQD3IpmdxUxn18xoFMGmU90VoImeFWzknHbA01EsXwDVNnINaV%2BxNPJbN2nc%2BSDOQy%2FtNNc4J5urmq4RF888W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd87fdd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"605cffb2cbe0434f5bbeea093bf15764","sha1":"d7473e5288ad582ec0387db13cc523c76fbfb5d6","sha256":"9a5e8909d6c566885d29a1c16fbf59ee5b7e3b79e14d2571c45ed0f78f17c2da","sha512":"5e87b3ae5ce693359ae75c95e4c2e341dd0b1cb479ada2fd4e84f61a1ad5f63020831c858c0d89406a168d80d8d3d028409dc779c93faa2aa03a897ae3b84236","ssdeep":"","tlshash":"cc31186bd11dbe28f378d2323e0e12e1196b87f08a348409b8b4ca7f9c805c16c41726","first_seen":"2026-03-28T23:21:33.938427Z","last_seen":"2026-03-28T23:30:36.629341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.animateNumber.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/jquery.animateNumber.min.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:48:55 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b957-56f\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bby2IEWpzHntZ6W3z5H5vs7xX1K5u%2F6RhQWIoBlX27XeIZn1DRSmJWoKsOIGEE%2FI4B%2BxfYtVN%2BOgIsaADkjEJV3JzmhSwziwC33PVDnRVTxN1u%2F%2BUfEOR9kPr8xg1wEYmfG%2BV%2FyZna22W9%2FOQFyWarLT9hPsD1vSB9N1yAmleeO%2B7tVsCvxygCPIxELb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffc356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1391,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (527)","md5":"c46a5138afcd0ac989037e5bc908bcac","sha1":"12a8dd3a49fb07fb906739626d9157e73d1789c1","sha256":"18201e44a097144b4b4d9fa01b548222bb46918ab5cd98cc5e48fe5d414d26aa","sha512":"598ecf8b3d93c188e42e5831c3d0ce3707f98b150e0672f71a8f8549da91c612a53aac7d17e79efc9b1a6e55fce1804f2d0cd43c9b19bd5f3cb3c60e2784bf50","ssdeep":"","tlshash":"14213158f36d124b5a222631433f6947e9aa68c4ed92b11db01074964f3798e22ffd34","first_seen":"2023-03-07T12:23:39Z","last_seen":"2026-06-08T16:49:28.310846Z","times_seen":1224,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T23:30:11.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASabORgA9qw6OkluRiQlGg2PByvxUwHeohwBFXHTS6NGEYQSk%2FxjZ9E37s9b7YwcMSJRnJxOfgBPtHVGZDwehDdIZdb3qyP5DYJW9NiU1McPdfLHskmm0wynscK38oCdsv4VONxosIoaFjgIMOR4VtHFo9Qlic0Bv1%2BAV5Y7Dapp8d9dM%2FNMOMVkG7af\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e3a6bd31d4475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":32554,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1587)","md5":"30be153b937704cbbab52ac5d397dbaa","sha1":"ef7335c1a425c253576737b22e085c16d498b60f","sha256":"776cc6c60ce8af05f61904d9006641e804e0c65c8552d92f2f02fc9bafdbe92b","sha512":"6657e914021ca50c19d889b4b15ad857880dfe459814de34a415757c470f682fb5d3ca59cb54322bc5d8bd5419fd988cb11d9ac9a1a7ed94a3763f2c57c9bf75","ssdeep":"768:0iz42Z5bcz4466N7szx92YOHNM36Z2Sug6AbS2EYru:0iz1Z5bczj66N7szx92YOHNM3z/9f2Tu","tlshash":"24e24520958d2cbf01015093e8087b0d7cdb5dbefa77961632ff596e37d2d20c62a66a","first_seen":"2026-03-28T23:21:33.965193Z","last_seen":"2026-03-28T23:30:36.632924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":45,"dns":28,"connect":1,"send":0,"wait":238,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/open-iconic-bootstrap.min.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/open-iconic-bootstrap.min.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:05 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b925-2462\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tvdQA6f%2FKlH0rTXTLqAYdixduQ3gfiX5VE1GJbsUMsmKBVNueFO5tKHwODs1HkoWNdutQvJg62O2t%2BFqogKuzuQk9rbU20zD9nT86%2FQLjNLb6OBd3YZMa4%2BQA8myWnAW8lKVRXWl8oDTzk0FrLi8NfdupPXVRYvNZxm7L7DfhyLsWmuAp0wlNxyDsG0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afa956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9314,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9314), with no line terminators","md5":"a0308dc7c29b8c4f8952d41a8adbe5d9","sha1":"35aed035284022d67be4d9170f066b20de2a5c07","sha256":"89db1108e74855d97cf4678068476727b046411f4b01304095b4e37e19c8ef2a","sha512":"8c2dd9db06fc5dbb1c0450065ab4b1addcd4fedb15c39ed50f679d04c2da29e4f5a687da31012971be5df5189a1fd28a5d58b9c39be2c72660e48639e1cb02b8","ssdeep":"192:7Im4XBI7MWgX89U5sNmn0iBq2W0IqVczvUFQq:UOMWgX8mnn1Tsvy1","tlshash":"b712f9a8e80a90e323b1c403dfd0675ea01df521f692dc56fe0f950e5ec166d1ad2a3a","first_seen":"2026-03-28T23:21:33.946273Z","last_seen":"2026-03-28T23:30:36.634859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/kr-link.png","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/kr-link.png HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Feb 2026 14:48:40 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6980b948-15fa9\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dAlZowI2G%2BME1SWAs%2FcYTokV8nrldoBH%2FGSriTKyrlLiAInK6%2FPHMmpaekFQi%2Fd6Deg7ZefMH%2F4%2F8IbazAt%2FbNIYMgFRMhKRe90b7D%2Fv3bBc89b6oziswvOIIhUiXgBnuUxHS0vLqo2aEREqRXd9HwqFZqXYjxZ5eF6CgtU25mLKFbjjX04AYRO3CAm6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efb956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1066 x 1125, 8-bit colormap, non-interlaced","md5":"b0ea0ee635b28f9d8219bd836365fbd2","sha1":"9dc783380727cd14a9f1e66529d704551a76bae4","sha256":"06084b3484c0875dfa2f0106c0dac0906a38a7d2472c4c4df0136be296e0dbab","sha512":"6799c2b256db076416f08deb358c8a5ad82669b676f18cd61f4eb72309e7f5b0e79627cf44c55c659a33acc76466a9f55468d656a281dde4d9442a5a2c13bfb2","ssdeep":"1536:iT/cem7thbSQnncuxYaTLOQ3KE5gHTJzs2bgjKdu9RYHtqKUA:UmPOQcuzTLOq15gHTJozK09RSqKUA","tlshash":"ed9312d676f8b263d04379bab3ec634182a2526dcc212b501fe5dd097b9234da092a7d","first_seen":"2026-03-28T23:21:33.959558Z","last_seen":"2026-03-28T23:30:36.635896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/56/5/intl/ru_ALL/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:16.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /maps-api-v3/api/js/56/5/intl/ru_ALL/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56986\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 23:21:09 GMT\r\nexpires: Sun, 28 Mar 2027 23:21:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 18 Mar 2024 20:45:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 547\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261616,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6727)","md5":"2140b519fbc0b883a762309ab732a391","sha1":"63aab961e817a2c67f2567d6d9cc358f071669b1","sha256":"3f08673794a8dfbef2ce6d0db7ddb273e6dd6607f3e38e35f4ec00a81f13221b","sha512":"0f49da573e255ab62e2ed35e3dc282dd08119365f1b97fe9b5d5b84b63f5e05912e75cff2ef6da3fda9c37986d801830d73cbce9e955b1ea0fc28ea94f4feaaf","ssdeep":"6144:8kYWcPXCBndXPCuN+CNgYCsGsRtcZafyAyxOpvLGpD/sMypk6u8B:8kBcPXCBndXPhN+JYIZafyAy8pvLGpDu","tlshash":"0144a56c7132af4e6832c853c266310de0353edff96498bdbef65594eaa5948f0e0634","first_seen":"2026-03-28T23:21:33.943217Z","last_seen":"2026-03-28T23:30:36.63719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/owl.carousel.min.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:05 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b925-b68\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfLP%2B2jl%2FtRzv51wcD6t1Bkk5Ckn7QkQBq0e4NnMECstCoUJ%2BI5UDBM30gaGzI95JgXMX%2BeWgpLrVRpyuZTI6MQ%2F%2Fq5Ds6kedE8jXMSe%2B5QDnmMhQbjquBOjt%2FmSCuuCO9nJ%2FC2wxioA2luGtuQBJawbgbEmjr8%2BQgeCrNBL7XyrWi4ki99J1N0TViD%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afab56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2830)","md5":"7a0e94d64133fea3211c437393e5c553","sha1":"dfe56cb4c44302c86f2ce61335bd336f71109d6a","sha256":"1bdf3ff5b5241880245bd0220b230d602add52fdc1175c169b29f83393437092","sha512":"1e87cea396942eb8f5619e116002bfbf88de085705d00bdd26c6e7b5fbb13bb84f412f87555340c8408cb0f86fbf7e7cc6f8bd31cd6c935eeedbfe83ff977ac3","ssdeep":"","tlshash":"0d51cee4314b215f480fc32219d85e87293ecc52d8260a5a92bbd718479ae2d113ffcf","first_seen":"2025-08-04T08:28:39.363765Z","last_seen":"2026-05-23T07:47:48.06271Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/icomoon.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/icomoon.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:03 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b923-4fd5\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkLBhZ55nRih%2FVpQoGuSJpklez8ufDc4w%2FJqr60Rp0c3LW%2BXF0L0fJbHLhPeNRt1Aju3HEXO5IEYJT%2FlIjDwnwF%2BdmY9tR4haDsqXdjARfTV6F6DfBOj4lUe14paMfGx1CZs%2FhkrTjIuX8X0h6ArIXqTCHxytfnTrbBRZox8SJxKfHoAUi0WmV9UoXS6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afad56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20437,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8271c5c7d5b3113e4d651605dea8690b","sha1":"7c247f1af84a168ab2da3ac7c51035b3ec335a2d","sha256":"bcac08f4025d3956fedfe404ef8fecdf678cc055dc3ff54470a14e2a356bf046","sha512":"dc5c0b1e3153a83a3dffadf5cf97946053717568fce752884dd875db8fcfe9510fb11cda92b46bfde74455693afa4841c8e8d84bb807c12c6ed7bcb06ce10759","ssdeep":"192:QaFIAAY08w9YeVEdguGwVO4kePLvuCE/R6cSV1ja5r8qx:rAY04/VBU6TY","tlshash":"5092a0e4e9bd0c841350e0d123566660ff0da3688d8f2d5af6a7b98cb7e2255c5c63ec","first_seen":"2026-03-28T23:21:33.966818Z","last_seen":"2026-03-28T23:30:36.638935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/56/5/intl/ru_ALL/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:16.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /maps-api-v3/api/js/56/5/intl/ru_ALL/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 57182\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 23:21:09 GMT\r\nexpires: Sun, 28 Mar 2027 23:21:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 18 Mar 2024 20:45:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 547\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187327,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (562)","md5":"53ce8da513cc7ebbec868cc5b1a24fa0","sha1":"c7cfdaa38459a4556e15f0bb6c7d0ee54e550076","sha256":"5a36168eb4922a8adc227a27a63b2023db4d9aa6f2a4590f2abc87cd612700ef","sha512":"c50d945b71121b36d80f6fa289e3b4d22278aae378ac9a63bd08d15bf0f2c0ea7d607fa4d33625e6f1a5a28f663dc4822845fbd81978f9c6f4768b1e54ae79b4","ssdeep":"3072:WTVYaNbEepT7smNDae6ecQhIh7BM5xshDlfC9jS3lqU+tXqQlgeFLlaKHuz1p4Qm:WRYaN0e6ecQhw7BM52DlfC83lqU63CeR","tlshash":"72040d643252706782a6b8e5143b104ae57a9856f408cc7cb99dddd3eff189930faf38","first_seen":"2026-03-28T23:21:33.956132Z","last_seen":"2026-03-28T23:30:36.611811Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/bootstrap.min.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b920-1e264\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BmEQQ8VsaYIugzCw2pEGZMuZvpYdtyjNKvg%2FxiISzY8vwIjT3dklZDzeJMzGs5nmyzilcV%2FZQF9Inccd%2FgM90VCh971xXvc9ar09DO9Er3v2cUChZ69RHUJowGWb3cSwQUPDB8A5KONJp%2BxJZclLO2kjcjw59UCUDbIVMq9ouIdMa%2FJjY4wDb47GULN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afa856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123492,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65320)","md5":"2a1db0ad46dab2338656f6d59b45fee3","sha1":"bf7a7137e43cec06c6732abd82516f7891c2c202","sha256":"0783892f55fabfbd0fb04e2bf52c607560066da2de665221dc55e0cbb8e3312d","sha512":"b4217c36d96861012f5eb55f31f722b22d850b0f551cdcc15265365da4cc5dccc611a503cc6a4328987bbb9279d9a5cfe49faa1588f01760cd305eca292e0717","ssdeep":"1536:bcEBu1SoDXcwQ7c6DEBi8vNcuSEBmjVyzAqhqczDsIltSQV81IA1C8rkFnM5SXfS:bcEB2v0yzAqhqczDsIsIlOEMH2UtV","tlshash":"e3c340a3f5a0215de197c25950d0bbfd096f8185d7221ffbb82777a44b896cb0a73a0c","first_seen":"2026-03-28T23:21:33.979138Z","last_seen":"2026-03-28T23:30:36.639568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/owl.theme.default.min.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EvBIOd6oz9OCTYFMnY8l4kN3WPxyoM3wrqU%2FXJw%2FoJZbLeqQfrXpVt6ziBHZe90zS7I5ntJxXMEAmiVgkcqVsGyX7CUzejzRNLgFsN%2BD870VxwSJjJys0HvK468PUTvOPM1zpAZCf1SKTrnWjrYdLr4afGYYMgIe1NIoeavoEhBnP5rWqskmPyrqtmH\"}]}\r\nlast-modified: Mon, 02 Feb 2026 14:48:08 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6980b928-3c5\"\r\ncf-ray: 9e3a6bd5afac56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d112370d7b3f5337386b9e177c914ca","sha1":"1d43c020b3d03f210275b24bb7c2d27be0f1ac6b","sha256":"f3ce311a88c449a4103d3d88e1d4e6a55a5a8418fb2b9b5fa6b0895e7ac6e967","sha512":"f680bc3f74fcb77ad80ced42590f8b6a1cd9166e00d87a972d1a74975d59b30e5ed2bc299658c0e265aeffadea3da633e0badfc47d3757d53c278251731a9f48","ssdeep":"","tlshash":"73119bc0e189221d3027d1905b5c43c76b1e687f529d0ae6e88f5151c32ed452a6fb69","first_seen":"2023-04-07T16:35:31Z","last_seen":"2026-06-08T16:49:28.277603Z","times_seen":1101,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/style.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:08 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b928-36c4\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDlqUcRwKdWO%2BpIqcOdd%2BVOy1VK8UFmffz9OjG14rLNGIeiAyal5NB2NHk66DQryQ9B9RyxcBRvFQOsRjiDWbaSc4uZsnQ3eh1RKiOV7OPdZQlDuxw%2F7epMDe8MhKpFIM8Y%2FBkx4jliRJsWCSg59B6PLWoP%2FZXOxHGnkyKGrLHa%2F1ybNsVInuWwbT4Qx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afae56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14020,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"5b5ed3b8885dc27a7729bfb2c3231160","sha1":"650a99b7c243d83b62fbc83a57440e667daa89a4","sha256":"378bdf261d185a6e12e9252f53bcbe676746a477484bb970aa98db416660e83a","sha512":"c82cb8bb8f0b50a58897bf8849fa448ab505ac2f4e66596b2358b4bea7c8719c2f466aa418ee8f21bd4b22b41190e027586affb833e6dc317a5f67ce2b98bb74","ssdeep":"384:izZjyexR0dCo9Ph7Glm2gV+S+I+h+ro/y8zJ3R:4u0m2gV+S+I+h+ro/vRR","tlshash":"42522fdb7ba33104342b91a9a7dfdb6437382003910ddca9778ee554df49bd821a2f89","first_seen":"2025-11-10T03:22:25.560042Z","last_seen":"2026-05-10T03:18:07.891035Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/js.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/js.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:01 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b95d-303e6\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LC7En9KVi8SUuUIoyGfD3FH0D1UY2%2BoVyxvytx%2Be32eOF%2FmJyE%2BCswymTm6wCZ%2FUdykq6TgM3Mt0k19gCVhn1P9jqxKyRK5guZ%2Bw%2FMDcIQQ1eZwvgfHl%2BqCIBtcbeBm1ACb4WB%2BCJwrRZXYfTx7Qaf1YWLuWTIdFVoDpbFRr2CZVrFee3QcgQz1CBTXf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffc256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197606,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10164)","md5":"b046bd8cb821a14facff922dc1305fec","sha1":"613091652014554f5684003ac180573ae3a7f6f7","sha256":"1f242d6dc02dbcd6c2b466f1998d30cae1964fe20ee7320ae349d42cbb415d51","sha512":"a561776d4e2716b1edf28f8379117db93d9c2f90b3c6911a211edd380b4ee7f865bdc89f964ac72136a612bd1364516f9b48d36b3f40592694473defc0e372aa","ssdeep":"6144:ZAKstYafT97XXWs6jJ/M4emOJ9tnVs99MubJGTcqwTjcS5+XR:ZAKstYafT97WLjJ/zemEtnVs99MubJGh","tlshash":"2a14fa95766270268392e4e4603b100eb23e54adf04889ecba9eddf3eef14491577f78","first_seen":"2026-03-28T23:21:33.970715Z","last_seen":"2026-03-28T23:30:36.643227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/favicon-16.png","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/favicon-16.png HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 335\r\nlast-modified: Mon, 02 Feb 2026 14:48:35 GMT\r\npriority: u=6,i=?0\r\netag: \"6980b943-14f\"\r\naccept-ranges: bytes\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBUFW%2BC9jMtGxTl2BWncQ7esNdrEgZuYVRuWNiHUzroiakfZ2vkg8WqL1qpjnaFMgoOA%2FZLZzhL%2BMzFIx5WODKF5RhbD32xYGHVm%2FT931U89gRTUDkPiEOdiEqLVBTMni5dUDj%2F%2FBJrRoqF8iZrjlWA5gNzNubZDfc%2Bwbic6R8aXmnSOcRNtMMWGhwJA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd87fde56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e82a55f15c65b582e24a8f97647df60a","sha1":"af1eaaf514c69ce2d25a1b6289b96f0b9a42d2d8","sha256":"38de453ad656e9ec7c61273ac8c358ed4c031db2d87635b9f1a13b094426bd58","sha512":"4e4077bb7a311584668c6c5b89b179154621637df912faf18db531d4da78ee5c10462b3219616d30e161fe90767d8bdc5dc535964d18ed99bf9522593cbfbb56","ssdeep":"","tlshash":"8be020c7a5388878d65d40914114085d8c652e55e53b840914778794395460590ff61f","first_seen":"2026-03-28T23:21:33.968288Z","last_seen":"2026-03-28T23:30:36.643873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/common.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/common.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:48:53 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b955-3fdf0\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIINxT7nEzztb0WWUgf0jTH8%2B2OBWcqdOMBwRb%2FpQDkLOuXl2QsSvzgx6jcDy8HxRFyMSK55hfxedv3u%2B2ofnIcq45thBrIH6vYaW6HlQ2YOQtlqo%2F1Zg%2FtCHUyhwXBNJjGHf7zUinY8hNfiJdP9z88SCZbesbPdyrfiDCEZoW50WrAIphenRDUsDJtV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afaf56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261616,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6727)","md5":"2140b519fbc0b883a762309ab732a391","sha1":"63aab961e817a2c67f2567d6d9cc358f071669b1","sha256":"3f08673794a8dfbef2ce6d0db7ddb273e6dd6607f3e38e35f4ec00a81f13221b","sha512":"0f49da573e255ab62e2ed35e3dc282dd08119365f1b97fe9b5d5b84b63f5e05912e75cff2ef6da3fda9c37986d801830d73cbce9e955b1ea0fc28ea94f4feaaf","ssdeep":"6144:8kYWcPXCBndXPCuN+CNgYCsGsRtcZafyAyxOpvLGpD/sMypk6u8B:8kBcPXCBndXPhN+JYIZafyAy8pvLGpDu","tlshash":"0144a56c7132af4e6832c853c266310de0353edff96498bdbef65594eaa5948f0e0634","first_seen":"2026-03-28T23:21:33.943217Z","last_seen":"2026-03-28T23:30:36.63719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/fonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/fonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22420\r\nlast-modified: Mon, 02 Feb 2026 14:48:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6980b932-5794\"\r\naccept-ranges: bytes\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CLNukvddbY3D6gvgQ3HrGf9QN5K%2BikaoUvcBwsjuM8oQbXHdGBXJnsCgUq866QtVJVeNUwzlowLxw3G7yCXD76vsIDzMfSj6G8f6SO0C%2BOwbIXpzNq11eAGUHcZu2oJmT%2B4REYQeC6YIDWHQabjYO3YTcd7oW%2BD97k0NL9r8Wj%2BDFnZO%2BUuLaxE5FT0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd6dfd056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22420,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22420, version 1.0","md5":"1157c949b5d3a24ed1bd538c058f19d8","sha1":"e631e727d846d55763e447bda8dbdcbc4834ed9b","sha256":"5ec1e2ebe080ec8fbfbdc7dd9c0c25449e1d98e4e947c11a00fd770d8841698b","sha512":"eaf0ed26ed31a8fb59c517efc4f993e81a53a4e3fd34cc81185c947a160d1c1368aaa00df48e6f5a5cf5dc1ac84c6fb2552e71ace76518e1b54aef9880ff4563","ssdeep":"384:GR2JF7Kq+tF66NqJ+8Iz9bD52TZ+IFMz19NvHd+kHGp+gZqXGppK/w/+UAkEOg1A:G0b7K9tF6Cq8zdD524IOp9N19HGp+XGP","tlshash":"2da2d045a94ef5a28ece0fe62842b76103dcfcb5a671e97d800d3d1ba755830868e877","first_seen":"2023-09-15T21:29:21Z","last_seen":"2026-06-04T16:45:26.202426Z","times_seen":2003,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/css.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/css.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b922-64e\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDRPj64uiaPKTRWot9bkeUzhwd6wb%2FmY3SRNq40Cs2yReGANA7oAZttqoq0zSNaI%2Ft89yn7g5slJlN%2FqHsao8jMByfhoctxmjVuIbUhI310EyM4T8InTfsR37%2BetuORxQAP1MPbxrRH%2BP95nKLhU8rhqahK80Yy9n3rhMGhkJCyqBp%2BtpGByr9tYyXQG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afa756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"530b89b697f0fba26e35d97ffa1dbbae","sha1":"b0630aa4dec2b1212520e6fe97d6821c0376bfd5","sha256":"ba2619a99df0542edefbd28ce16d7cedd74769d527d0b1b4a4a0d588e9fe5147","sha512":"35f1ef219f0595bf08562b3195c37604db418860985e8fd76a415235154e43797e230011f68d3d775a2335d874f603610eb3c61cb804bc4acc7cd9406be90964","ssdeep":"","tlshash":"3a31af515c2b610097531cd7e7ce3e328e8c6111300796373fff14aaadaad6122e4b0e","first_seen":"2026-03-28T23:21:33.927796Z","last_seen":"2026-03-28T23:30:36.652508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/css/animate.css","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/css/animate.css HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:48:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6980b920-11fa9\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1DN%2BKma0%2FI6fCSszm5gHmgjVOwzYzmeGJ0zn0rkwWSmsRyQW2qq%2BMuAfcLGN9YAPxfPY5ws71LVVdq2K1M6%2BRAuSjKuxbem5EIOxCuNjFsqxvvtCJiexxt1XZwFt0McB1EOtZQDnyKDWb%2FNuG2byTVTVXQD4bpUh5Hf0mwQH601L7ZFIN2ZsipYjbUe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5afaa56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d7162a81f1a7ea04ed38f436d252c53f","sha1":"44269ae99430a178a2ee6f5a6db26363e91cf15b","sha256":"d5c5e731b8c995ac40ce247ab42366d7df4cea7522f743480afb9be0a93ad2a7","sha512":"2507dea14b8604dbbd32df9919f28a8b1c30076eef3cfba0ebb2121ede9f49c4a266471453c89f26652b858dca24d41bda26cbbbc65724037a91d32f74fa4078","ssdeep":"384:xNHuaubH2fqftulucfwf7l3luy/ykgsgtU/UYGEGD+TTpauf8BABNGPGF+1fHf7P:THuauqfqftulucfwfF+1fHf7SpS/fjfp","tlshash":"3d73306d2991118457238a1d83df9e68273ce573182a9cef73c2498bdf86fac67c5207","first_seen":"2023-04-07T16:35:31Z","last_seen":"2026-06-08T16:49:28.279511Z","times_seen":778,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/img/dr.jpg","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/img/dr.jpg HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Feb 2026 14:48:34 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6980b942-6c98\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOrljmsL3isrJUIWW%2BtRTgc%2Fp5Mskc11aZnIGOcGkovqYYt4D%2FsbWwOiq5N1MpiLJteQWoIfAI0Z%2F8MCas5teKtKatDrkEiBuq3pfQ%2Bi%2BA38R0BfMVOs5kFUWLWQ%2BF8LM8V2f5Ds71kpy3K7sDmVUFRn56HUikj7QK%2BhmrItM6w9gKGAbDbe5mybCN%2Fv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efb556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27800,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"f5752cefa07403148b287d5c8a946a0b","sha1":"1de26ed49972948e4cd499d571ea5e90cd8b7065","sha256":"426f2233238fdebda37af87cc8cbd2ca49c4c4fb06dedc882d5a7b57eed05137","sha512":"dab94da96f74dba1c8f94a7b06384485901c3f0e9769f73d001b0e5b47b18ba9377ce51d0f1944906071a7adf1e71ca759aa899f12aa0765466545eba444ab03","ssdeep":"768:RlT1pmjWZ6I2RqH8SoTGzXbNbRfFSJLpC5U6:QA1yqH8So2XffFSJo5B","tlshash":"c2c2e1a20bdb9143ccd8243cc06f92a11a399ffecb57078a83cd387921569b17d5096a","first_seen":"2026-03-28T23:21:33.947986Z","last_seen":"2026-03-30T15:53:36.954427Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/bootstrap.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:48:52 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b954-c7c7\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1t47qCR1xzabmsPQLlfnVuXqrWY57HpyvwD6i%2FO3VLRYaJHGVp5sDa6z82%2Bnm8VupiEIuuz0G8%2BpBDFXCxFGVwyAepijga3pUHBVJIkMqoi2oR9aI88JkjE2KGyOsER7xV%2B2Z314YyR3X%2BHOcFLHxMmxAT7jWgijRCJ8cNglFJjXtmoFou7Qyn8cs9R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffbd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51143,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50904)","md5":"baaadea4492b059f284187d75af46063","sha1":"7326bf5e023f871afcf6ebb18cb89109f81a7708","sha256":"0e25895d7caaf355a53d19c37c69a06198f668e5422b211d27597ed93983b80b","sha512":"b56367cd0554d9e5d12103e2be34e304433b898db5d78439a4e04845168e413d90875024e3c5583cde3ed8aa68989a5c7ab37aa51163e65fb72e7c50d1db587d","ssdeep":"768:bVCSRfsdjHVpcKc2v5dTq7gBaBIzySppHcWFcXPv1mAaCcE1dLPmdwGmo:bVDROhicBaBD0pHcWFcfv1mrCcws","tlshash":"d633970a725474a202df6475917f050bb33b285de60a90acb99e94fd1ebcd8c7267f38","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-06-07T10:43:39.780108Z","times_seen":3873,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/jquery.easing.1.3.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/jquery.easing.1.3.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:48:57 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b959-1faf\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZHp8dbS%2BRFA%2F6R9kB5cnwMclT1K%2FljaHYWEhMWN8zuCiuiaE3r%2FeYMl7EqwRWkdT1XZM75uCazCMVcJLKrRZ5HKjHiHUza%2FThkhgzIa7nGU7g0QapIs%2BN6lY06Rdfg7Fj%2Bxx9tIfzKx22nvkfdmtLBIoBkNOMbsBoTWxzMujvbu60qYYlcnF1jrPugn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffbe56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"2cb90c06cfc2084e0e11ca2b8a10f6c9","sha1":"45144c119832bb70b1d0e9708cba1e007ee9fbec","sha256":"11c19392554c9b78c15771afa8f9fbfc78e0e46ca9527831f90ae41f95da73b8","sha512":"3296392a63afc82458dda56b2102d7db5742c8dcb75f4f0915fec0e487fccd85e0c4ab4bc8a6481a535052c44fcfa0cee08924701fafe83eac304aff5e828351","ssdeep":"192:pw+Or8ur83V33R3hqRAsfAy4DOr8ur83V33R3hqo:qZr8ur83VHBhmFr8ur83VHBhL","tlshash":"def1038963c0631b4359f270aa3e5e4ff268642b566e681fcc5c5084bf7d339c27ad68","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-08T16:49:28.291938Z","times_seen":1631,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/owl.carousel.min.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:07 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b963-a70e\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yilMScv6x5wpqzuLcGamF%2B3r4AqkqYHF7jZGCM5MAmqq%2FIC5dgWqZV%2B40gyi347Zu3pEqqDMcRIqgncdD5tmE03O2iSHvCqMbrRc5fSzJFNrsHiYhux6r2BmZi0ivRBdL0aV%2BIuiBDCNhKZRtYf1Iyo5z3NXllkabOTWRj%2BwHJNNZiQHQqPeVN58NTFu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffc156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42766,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-06-08T18:21:36.192154Z","times_seen":18889,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/main.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:04 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b960-d98\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJvPKz4oknd51U%2B50iiy%2FAr7mYMWcyto%2BCj0Dyf1TgKgnlKeznNCmLsAK0vNqPnOYxY5UsUYXotoMUf3eyIFIUm0n5TrQLg7gHnzpfwlf3K25cWcahUjql2fUb6L6d7RXL0L9Z7sw1sQV7gB7esxRihThcoK44SNuO0brA10RuMXqMR0cz2KomoRC3tI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5ffc556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b288a370f318bb8c2072f2379b3735b0","sha1":"c86f55f04a2a06f71a3401f3c2138a1ba7c2808b","sha256":"7619c439520fd837fc1fd58de113c6588b434690b3b8416cc5124884cd90267f","sha512":"278749fee4c9319f7d9281170a4b919bcb445b941a7e3f5b944f2ceb4d7b1fa247105af3295819df444fd7821baa149acd5601a486a9e356e9dadd3e4a5f0d7b","ssdeep":"","tlshash":"e571add1f7bc305205bf31ba486f24cc193c10b2d805156bbcba56982a9627d3b7ad2e","first_seen":"2025-11-10T03:22:25.566594Z","last_seen":"2026-05-10T03:18:07.881725Z","times_seen":10,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/assets/js/map.js","fqdn":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","domain":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","tld":"vip"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/","date":"2026-03-28T23:30:11.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:47:06 GMT","end":"Sun, 03 May 2026 14:45:38 GMT"},"fingerprint":{"sha1":"2D:B8:5F:F7:8D:EE:0B:20:BB:B3:75:06:24:1E:7C:AD:97:A8:CB:D8","sha256":"B1:54:3B:8D:59:A6:C0:82:17:9F:BB:08:90:99:8F:C6:D7:A6:40:EE:34:11:5D:50:9E:51:AA:ED:0A:14:79:00"}}},"request":{"raw":"GET /assets/js/map.js HTTP/1.1\r\nHost: kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 23:30:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 02 Feb 2026 14:49:04 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6980b960-12c56\"\r\ncontent-encoding: gzip\r\nage: 547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuQ9gh5J4rd1OVoBxQNcz5rqUGqAA23mbY1iVZETAmSJ7P8MapUG95NEYRf%2FnZFT2t54T8u%2BpxTOuFle4fIWBZxXw7G8sL6NYYxtd1BeM70%2BY91OWs%2FI5scYQvr0jV4%2FZlm24X5%2Fvug7k%2B369PqqvB0xPgKvfKFKhBJhYMtTk3ieQgOnTdlSpl3zCiC1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3a6bd5efb356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76886,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2816)","md5":"b3cf0b72980cdee7a977a9f09e1eb313","sha1":"f86da45a195de3557b271cd74003edd3c832949f","sha256":"e73e74460bad5b8267827cefee76910c349c9d1e2ddbac71ebf82868b1a2421d","sha512":"3b64fe847c678657d2b8335079fa917744449f0aff996592a1077145edde41d29447b54d38a73dd986f989373960d6871f6bc7d287078e20c1899f6ecb2b4db0","ssdeep":"1536:fzV1a87buDLATIJwyVmABuBqX4joMQvthSpq7axeK2cc6+Ob+PDc:rVg87bugTIxUABuBqXWQXSplxeUc6+Of","tlshash":"62731864732220ba5191d5e4a43b054d6069e465f008cabd3d3edee7dbf488732fab39","first_seen":"2026-03-28T23:21:33.973659Z","last_seen":"2026-03-28T23:30:36.664811Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"kraken2trfqodidvlh4a37cpzfrhdlfldhve5nf7njhumwr7instad.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}