{"report_id":"83a64baf-fce7-47cd-96d8-d9168efa7c61","version":6,"status":"done","tags":[],"date":"2026-05-31T17:07:35Z","url":{"schema":"http","addr":"krakexx.com","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"krakexx.com/","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"title":"krakexx.com/","dom":{"size":78733,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (42997)","md5":"15f06860d152c2304ca4843bc78cbb66","sha1":"a4031899775960a8ccdf05d8da7db1d1c9cbacf9","sha256":"4650d198930415b980ea412e79f523ec17e95cb2bf6520e07f432dbd0676bad1","sha512":"38065a63961320b1d57ae125091d41d4e305de455fea9b2a9be790933e3376a0e39f026a50c13e910136d1293976bdd26d2cc29544ec73e41a66576f7803ad52","ssdeep":"768:ItT4WOdSv1GTkHHKuL2L930wosgnGvuV+oY9vhF:DvS1HYNgmoY9vn","tlshash":"9173c764a7c1407706b78fc695a1be6c6286e36fd0a6d098b2fc43d86fc2fe4f546490","dom_hash":"domhash3b19a5aa6b5c38d9b3c8fbf11c4fec58","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakexx.com","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-05T17:07:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.reown.com","ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-05-30T15:21:08.205544Z","alert_count":0,"request_count":7,"received_data":338059,"sent_data":3535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"104.26.13.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-05-28T18:48:56.43787Z","alert_count":0,"request_count":1,"received_data":1877,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-05-29T19:51:50.084545Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"krakexx.com","ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":248,"request_count":124,"received_data":5110451,"sent_data":45598,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-05-23T23:39:49.673783Z","alert_count":0,"request_count":16,"received_data":180818,"sent_data":7218,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-05-29T02:26:47.827547Z","alert_count":0,"request_count":14,"received_data":32855,"sent_data":8165,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e569eff5.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","size":3101,"data":"","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-7b62a5ba.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","size":3015,"data":"","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-d4dcf123.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","size":2511,"data":"","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-39a44663.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","size":17121,"data":"","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-b8f4bc3c.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","size":46047,"data":"","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-d51bd663.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","size":4843,"data":"","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","size":3315,"data":"","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-05-31T17:09:56.262642Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-36ac775f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","size":1814,"data":"","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e0a7343e590e4b2e68fea466ac533796","sha1":"157955af910b602def2fb7ccb3cfc2349619433c","sha256":"1f4e9a9aaf729ae7aaa8082a6c4ccb3082cb5bca5d7ead0f6d129b28ba4ce60a","sha512":"fe989f835a81f1d2f0d611e0750312a9248350632f70aad49f9d0113d7d1ef287e2bb5cef46867bdeabf3a5aaa6f5b80ae07eca85a7ca81ac06e1e0d5b1dccfe","ssdeep":"","tlshash":"e6c08cc4a0c26d005a52a61110bf24e4a024442b70885b028c98e84a2e220b08233e98","size":142,"data":"","first_seen":"2025-09-06T11:46:38.61477Z","last_seen":"2026-05-31T17:09:56.375106Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-a147cb61.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","size":229987,"data":"","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-9a611939.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","size":5151,"data":"","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a8333fa4f5a7c115c3d338f715d710b6","sha1":"85d9623120c2753dd2de36578cf1cac587152bd2","sha256":"4812d4d9a9636856ee3e917a3bf0eee7042b1969f9bc5fdb900754755b32b90c","sha512":"96d4a581ff47246c45fa475a2c2874a2a2d2387d7ec1043b58ed94569af99c55647fab01eef77deb3ef15451d5c8cd1c15257efd4c9c67c3dd7e67de9dac188d","ssdeep":"","tlshash":"b3c08cc4a0c23f146702651110bf3af89034442679482b139de4e8993e620f09237eec","size":153,"data":"","first_seen":"2026-02-04T16:46:53.927086Z","last_seen":"2026-05-31T17:09:56.376581Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/ref-826e0ba1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","size":2156,"data":"","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fc69a8b8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","size":4963,"data":"","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fc1e2a83.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","size":3883,"data":"","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e741169d.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","size":3131,"data":"","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/receive-316eb367.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","size":6621,"data":"","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-78a86ef1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","size":5676,"data":"","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-22248626.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","size":3075,"data":"","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/HelpersUtil-27422063.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","size":3196,"data":"","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","size":4729,"data":"","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"99f627175d32deced3144853ae54119f","sha1":"b9c761a937e659864b4f04fbf3d132c8d5c72e98","sha256":"85765635423c64ae5bcad7124ca3f875207202eab7339219f772abb11944e1e1","sha512":"ca22ddbf642440e4f4ad9cf8446737931589848bb2d0acd04419299905cf6336a380389f0eb417a68e6f53c4c9bda61489bbf641448f26129d68ca92ae95d2d1","ssdeep":"96:mq9hafUCzCSDKCfhpq+hqqGtdMVZI3o5R3w3fo8C+Nqn0Si:d9hafUCzCSDKCfhpq+hqqGtd2ZI45RgT","tlshash":"a7913e67b0e3005845a37a644baf732c393b600b3a0adde47d5e1b609f57f625482bce","size":4453,"data":"","first_seen":"2025-11-24T21:16:20.877428Z","last_seen":"2026-05-31T17:09:56.37932Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-3e85285e.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","size":1576,"data":"","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-23a43da0.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","size":4734,"data":"","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/w3m-modal-a765f42e.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","size":46159,"data":"","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e1f7db2a.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","size":33100,"data":"","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-2886c057.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","size":29815,"data":"","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/send-7c4c9d57.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","size":33591,"data":"","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhInfo-6eb82573.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","size":2776,"data":"","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-05-31T17:09:56.226511Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-8d97d39f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","size":6947,"data":"","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-05-31T17:09:56.375876Z","times_seen":1303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-3602d8eb.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","size":6313,"data":"","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-056337cb.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","size":4166,"data":"","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fb575795.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","size":3036,"data":"","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-5ba2403b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","size":4173,"data":"","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhX-3214edf4.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","size":2498,"data":"","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-05-31T17:09:56.261773Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fb848e84.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09ea3f652980ecad9b5e805c6bfd8c54","sha1":"f87a2a4adb6fc4465789a65f7ced64bd48c3a334","sha256":"73a2b75afd236fcf0210f14513e0cf1467dde60789969a95e80003332a7b3f64","sha512":"6335872a972e7aa6255456baae6e496e5717eb23f913f31b4474e0c588ca6b38d40ba983e9a27c63a71421dfc310ed999e319ce4009ff5478cf8f1e1f001f395","ssdeep":"49152:KL3j5T1gIH3wo59lo/PDXgRw0ERirdxQR1lc38NOYw21SnRKEhlhvlbp+HAX4Ylg:8tVxbpjX4uyBCBNk+XHvJaX","tlshash":"bee58e807295b47507a755d4a46b1102f1385ca5b05ec0a8f6ec9cfb3afa889c67ff38","size":3202851,"data":"","first_seen":"2026-02-04T16:46:53.92931Z","last_seen":"2026-05-31T17:09:56.377912Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/SwapController-128e9645.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","size":13816,"data":"","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-458e75c8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","size":1908,"data":"","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fe82323f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","size":1427,"data":"","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","size":69,"data":"","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-05-31T17:09:56.289313Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e1b9a5f8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","size":2994,"data":"","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhCheck-1cb2a956.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","size":2110,"data":"","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-05-31T17:09:56.311751Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-05-31T17:09:56.37333Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-05-31T18:22:01.617741Z","times_seen":666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/if-defined-49fb0c54.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","size":161,"data":"","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e49b3847.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","size":1270,"data":"","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-05-31T17:09:56.372195Z","times_seen":991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/VerticalTickers-27d43059.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","size":23018,"data":"","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/home-f7f6e3ca.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","size":22771,"data":"","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-73a416b1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","size":56425,"data":"","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-cd74709b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","size":1384,"data":"","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/property-6708c68b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","size":17735,"data":"","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-05-31T17:09:56.310085Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","size":1955,"data":"","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-05-31T17:09:56.290564Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/Home","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-31T19:46:10.760783Z","times_seen":5453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/purify.es-ee0e7e34.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","size":21919,"data":"","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-05-31T17:09:56.234054Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-41281e13.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","size":3966,"data":"","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-bc8c8fdc.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","size":3023,"data":"","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-bd925ac8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","size":6571,"data":"","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-67b7a897.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","size":4104,"data":"","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-f72c7cd8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","size":2813,"data":"","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html#/","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-31T19:46:10.760783Z","times_seen":5453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"krakexx.com/static/js/index-2886c057.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.027Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-2886c057.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/receive-316eb367.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-7477\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bts.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bts.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WOh9tthXPMy/t9bOAj5wMzOTnJUt+eu/jInoOpeEm/sf+HKM4uPl7pKQPK3Ly4p/CKezndXVFyy9TXaL+bzmpHm0LHBaCdJ9\r\nx-amz-request-id: QCKSDVT88CMYXT6T\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:40:04 GMT\r\nETag: \"a12001eba3f8b40d252d09e0d21f6884\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1433\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12001eba3f8b40d252d09e0d21f6884","sha1":"874702fd7e69b788e419bd5258c9a80a9edc486c","sha256":"c9c78d7bb49415d4816f380f883baff55ce5f88997875c36d8ea98846a191c5e","sha512":"891a2a6a3f995e8070e6a6f2c6b9922be3539cbc22347e05fd867ee4a49495a5a6d2f4a7db5bc641daa3c981d143d14d7526d018af2252ba3f7477f7e6afb931","ssdeep":"","tlshash":"0c217411b324a23c30087afc527ae473fe605ef2951150d4dbd90d80f95266dada2dd3","first_seen":"2023-09-10T20:06:11Z","last_seen":"2026-05-31T17:09:56.33259Z","times_seen":245,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":1236,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/v1/api/exchange/getSymbolConfig","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:27.867Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:28 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 7841\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7841,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2908e45db2e79f34ac8b3ee500177965","sha1":"7b3d85090911f28c56f807a2421d88944e5bafd8","sha256":"a8896476548b417a82944a425ab8d59fad81a1a70a2ef2635ff2d5443e7fadc5","sha512":"175de4338b56de2744a73b45ea3f84a58a59eb241c9b032849e87e9090a6b916adcf946cdab6db8a5b9aa58e441b312e43056d6bf15281e86106018d29acf50b","ssdeep":"192:D3cbPJ/gq3hlfftldHG9l8LYQHD5mliRSkZ:+PJBlHYFsDx","tlshash":"bbf1b94567215bafc530a0c21cd23bdc496f25a62cc61a46e5fede9e8348def3523722","first_seen":"2026-05-31T17:07:46.928128Z","last_seen":"2026-05-31T17:07:46.928128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/index.html","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://krakexx.com/","date":"2026-05-31T17:07:13.148Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:13 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-93c\"\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2364), with no line terminators","md5":"fc3b78b3fb9ec2e09a061b1566bd2b86","sha1":"0b6d5029476a9956beaf4e18aff4d8e9dd24638d","sha256":"0c25d38c18c946744ebd1c5fa986c41471e4857cf801543fee30836b3fa33d6a","sha512":"ba20af8fda6dd72ecd48387e78ca87dd121a0b7e28afa5d385eaa5cfc9aa0bf6c8189c8a4fcc8df353b9c01ca90e9061ba88f8d780b7ae69bb40f9820b01feab","ssdeep":"","tlshash":"694123539442261af0238eb992f9b924c57cd426d6921f99706179b8c7c2fd681e331b","first_seen":"2026-02-04T16:46:53.915719Z","last_seen":"2026-05-31T17:09:56.342739Z","times_seen":15,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":94,"dns":1,"connect":93,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/manifest.webmanifest","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.176Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 461\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"697bc72e-1cd\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-05-31T17:09:56.201149Z","times_seen":28,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-23a43da0.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.875Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-23a43da0.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-127e\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/v1/api/exchange/getSymbolConfig","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.920Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 7844\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7844,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ec465c51c2817491fccf44bc8f3e1768","sha1":"c8bc4487b514f2f9659f8b8cd4775afd5a042e79","sha256":"177e8caa9b99240e46f7bb04affb529c8f8473ef5a870863b2c74af0f0b865ce","sha512":"bdbfdb6e610dd400041750b2174ef6458d76812e9315369e92dbea9213ca471e94334da1e94f95c81b39d784ad0ae7d82b18afa44c97584c5de579d2a13c8272","ssdeep":"192:D+Ps6bPJ/gqBhXfPldHGZ38DoQx5DvidJE:oPJFHy4xL","tlshash":"d9f1ca4527215bafc530a0c21cd23bdc496f65a62cc61a46e5fedeae8344cef3523722","first_seen":"2026-05-31T17:07:46.955058Z","last_seen":"2026-05-31T17:07:46.955058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/HelpersUtil-27422063.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.066Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/HelpersUtil-27422063.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/w3m-modal-a765f42e.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c7c\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fc69a8b8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.068Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fc69a8b8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/w3m-modal-a765f42e.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1363\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":355,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/VerticalTickers-27d43059.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.206Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/VerticalTickers-27d43059.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-59ea\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":244,"dns":0,"connect":94,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-31T17:07:12.835Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:12 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 29 Jan 2026 20:46:37 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72d-2a26\"\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a94cf09d11d3bcab3ca6d961167e5d42","sha1":"05038eeab9c8fe632402cdd0617983a80092750f","sha256":"f575362fb161a660ee78538b8fccc9bf7b459f5b36d7ba87ad2c6db2537d6188","sha512":"13130ff2cbf4d2da55dec18421908fc0c0b1ee5d6b992c133e0a206b44c8f4acb9e60fcd3a325650f9bbfeea8c7548f8f814d8dd827ee02ce6d5b1496b42b486","ssdeep":"192:vS6WuJz9Cc5T+KeP5VPkLrhkohUxSPNS6J1Dg6VEHnhZBt9HLtm9hafUCzCSDKCB:vS6DT28HJtUdrtmja8ItTEaIARgvY/","tlshash":"b1225367a8e300596457a2641ffb332d3635900b7746cda83f9d2ba48f83f858453bd9","first_seen":"2025-11-24T21:16:20.874299Z","last_seen":"2026-05-31T17:09:56.194935Z","times_seen":34,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":92,"dns":1,"connect":92,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-3e85285e.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.881Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-3e85285e.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-628\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-a147cb61.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.895Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-a147cb61.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-38263\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":96,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.909Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 69\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"697bc72e-45\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-05-31T17:09:56.289313Z","times_seen":47,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/SwapController-128e9645.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.048Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/SwapController-128e9645.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-35f8\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ordi.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ordi.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wmzz1Wa6O1A1wBmK2OBKDPQU+T9hx0+ISq0GaXoMVXg3JZUt7bT34qUzWmEaypA44W60IDI371FfeBC0P3yl2FOXxO3Q5Dln\r\nx-amz-request-id: QCKP2FMHKJ89M6VC\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Sun, 30 Apr 2023 12:50:40 GMT\r\nETag: \"be20ec57e8a4aa7b2a338e48acdce782\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3560\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be20ec57e8a4aa7b2a338e48acdce782","sha1":"141496897f907d601a749439a82ad40d805b2294","sha256":"35dc8d4477166c6aac8a1e3635443f93eddcf22f95f297aeda99b6e453923205","sha512":"43ba6eaa071f9abd823afe2c47cfd814fef95a73f89f3eaaa13fcf1589c5787bb2656a0018a394af52925b6063fd5d772d21bd5e99c5d3fb9797c538994b0bef","ssdeep":"","tlshash":"e771b5d452ad91e2fc43d3d6dac2115a787260a92acb8064f6ec5257af390eb4407394","first_seen":"2025-06-19T20:00:31.917814Z","last_seen":"2026-05-31T17:09:56.31862Z","times_seen":148,"resource_available":false,"data":null}},"time_used":1702,"timings":{"blocked":709,"dns":11,"connect":262,"send":0,"wait":284,"receive":0,"ssl":434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/index-64018b0e.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.196Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/index-64018b0e.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-108e\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4237)","md5":"3c684af8b172bbf98c9863dd2dc7db9d","sha1":"f4d6852ce2e2c7aaecb3b7adf9307a836822b2b2","sha256":"64018b0e7980220a7dab8725807c61cddc279c9cd2b2b99e52b8a30dd18ea7de","sha512":"fbd99a64c8fd263ac3484229eddce1ccf7a6627eae44f99318d0588132f8eeb196487a4b97de590f591991becd18e48e46b64302bdbf73e22930ab479dd539cc","ssdeep":"48:FlF1D0mm2g1lMQE2imldovbJevkdFGVRIR8/FsvrS5eR6YShFQCGvRjVjmrT3xYj:7t5dFS24F3526Y1CQ7jgThYcfhKn","tlshash":"1591cc3bb18df6086077db91f3d17688925de523a2c569fa540c286dcfc3e8127b1369","first_seen":"2025-12-10T07:39:13.865038Z","last_seen":"2026-05-31T17:09:56.247638Z","times_seen":34,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":87,"dns":1,"connect":93,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-d51bd663.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.854Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-d51bd663.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-12eb\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-bd925ac8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.906Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-bd925ac8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-19ab\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-5ba2403b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.907Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-5ba2403b.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-104d\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xmr.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xmr.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: J/20bZqhHWPCTgIYygVTVFDgCxLiRDsdiROEYUkWOnsRqA02CGEET+wc6HJjFE/X/LgSo7CnYMUd/Mz5jXseWMb5gxcmXJmd\r\nx-amz-request-id: QCKZBPFZ1EVCEM7K\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:26:40 GMT\r\nETag: \"fdddffb238bc363e6e7d7e9fb8b2cbfc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdddffb238bc363e6e7d7e9fb8b2cbfc","sha1":"2472cd3130002709666e130d8bc96fe1fe23fae7","sha256":"d4056d45614e9aa58321b8db2cac9ecbc6c3d9048d49ccae12a6ca5a5a31a06a","sha512":"da68083024e8e5b8412c24febd6fe422cc780c08242b2a4ccd59ff1c37feb820e78046b3732991589d28681f4480661505107dc06616f178be39b310a7674fd3","ssdeep":"","tlshash":"64f002a8f1d8a71c78086344e73b6be061d17ed5f6434351f388bb25b2440569c106d3","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-05-31T17:09:56.204986Z","times_seen":154,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":1022,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\ncf-ray: a04792f22b6975ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 43186\r\ncache-control: public, max-age=31536000\r\netag: \"cfVAcZ3w6iX14DvHKhBFs4CgkyfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=490+0 c=2+2 v=2026.4.7 l=1318 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-05-31T17:09:56.346788Z","times_seen":574,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e49b3847.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.867Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e49b3847.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-4f6\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-bc8c8fdc.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.899Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-bc8c8fdc.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bcf\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2190\r\ncf-ray: a04792f22b6675ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1643\r\ncache-control: public, max-age=31536000\r\netag: \"cfPi3Q2pR9-1VkL9hnF0Qjwt9_fmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=10+0 c=2+5 v=2026.5.2 l=2190 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ec24d6d0f8cc15531022c1d2d10ed5","sha1":"a35dfc22eac4a148d164ba1c0c0a30622d996cd4","sha256":"c17fc5b943b9ef6f7b6ddd64e34efbe217a7328513c76dbf33aed86c0019793a","sha512":"47054745bf01743c5756f0cb8a021dca767c880bbe1ec98a44d6819d6395d991dd88def918500862b763955f09ff0b31a7e8876e4178fd2b0aaaf7711df24557","ssdeep":"","tlshash":"eb412940ad424ea8e6031af82fac34a8555a0d6f64478c0d8029f336325fdd2bac4f6a","first_seen":"2025-03-04T08:48:45.474684Z","last_seen":"2026-05-31T17:09:56.280929Z","times_seen":418,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhInfo-6eb82573.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.603Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-ad8\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-05-31T17:09:56.226511Z","times_seen":27,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e741169d.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.025Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e741169d.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/receive-316eb367.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c3b\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-056337cb.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.065Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-056337cb.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/w3m-modal-a765f42e.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1046\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":311,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/id.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/id.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ww7iagrg9aNhDdsHlqVVHcvwXWUcWOlkpIkFyBu/reZ9Tumo7OW/Ab0ecksTnPPUspeMzPV0HMMRNOmU74kc2TqlIJZxCt9Z\r\nx-amz-request-id: QCKHK63NFMMYCD0J\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 01 Aug 2023 12:19:18 GMT\r\nETag: \"814f626fa5df0816a76957898ab17546\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 66185\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":66185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814f626fa5df0816a76957898ab17546","sha1":"5fe40d5015ddd6555acfa862e868247c8636c858","sha256":"16c5691b1435c4f30f2a171870789b914983963f2b84a4e225e08e6ec11d16d9","sha512":"4e89a4240e47fd80f3b00fc08589f79c6c60ad797371024f769728db2681f82aa1c8d61bcb1bb1ac3b26ad8952608589d4eb3ee98a29e2c684bdab6a9b7d1477","ssdeep":"1536:rERrqlUBeQM7hGVseI91rW4Fws/2iNeO0A6oVI:rE8vB8VsFrW4FwG/oO0W2","tlshash":"0353cfc39f979f67454ee30e694d604d2d1cb9f3baa260986e8d8d83b44a8443e061f7","first_seen":"2025-07-05T16:42:06.921322Z","last_seen":"2026-05-31T17:09:56.238783Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":965,"dns":0,"connect":0,"send":0,"wait":287,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/mnt.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/mnt.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: KoBOQW6hG/eW+thche8M4vInUI52nA0NPW4F1l5kHiVDkdkS7WsCZSvr7npzXFnpmB2Efv81NLWGGRGVbKb0KeNZ25Omic6I\r\nx-amz-request-id: QCKXQJNRTY9N4TDH\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Fri, 07 Feb 2025 08:50:51 GMT\r\nETag: \"bfbe6b0405422cc264680437fefcfb96\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 29193\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfbe6b0405422cc264680437fefcfb96","sha1":"c6b51299017551415982de1d412e90d05d7d84c1","sha256":"0a543865636f37f781adb998e145a6ef5a8c87c9fac6a077fafc3c703e9a8800","sha512":"9930d3e7941377d680207ca7b70da191463d20e19b6ad4c85a47f0ed1ffc2797f45675c488d8f411f26fc60a9682285c826c4deacc2e563042d0e92de48104ff","ssdeep":"768:gEBJN3nmxAwTxC4nphzFZnToJu2yN4tIzh2v/lv0lahA:gE5mxAwTwatFuDyN4tIzI/B01","tlshash":"26d2f158535aa13fb7d822dc3ac7f826f32a518cb180f05227d50c66633ad872d547d3","first_seen":"2025-03-06T11:30:53.668336Z","last_seen":"2026-05-31T17:09:56.357246Z","times_seen":179,"resource_available":false,"data":null}},"time_used":1780,"timings":{"blocked":1245,"dns":0,"connect":0,"send":0,"wait":278,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-8d97d39f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.568Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-8d97d39f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/home-f7f6e3ca.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1b23\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-67b7a897.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.871Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-67b7a897.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1008\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-7b62a5ba.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.874Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-7b62a5ba.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bc7\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/receive-316eb367.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.917Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/receive-316eb367.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-fb848e84.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-19dd\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.599Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-cf3\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-05-31T17:09:56.262642Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/v1/api/config/platformConfig","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:14.682Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 3831\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cf14d2c85bac1a3af5ed8a0fa7b51429","sha1":"a6870017b1b0a7a505afedd2079ba2d9854b2f23","sha256":"b275c500e02f6bd173f7f1870f100341e7e833944d78e55c93c46c22b53fcb97","sha512":"9c20902ef542c2aa0022d097187ff5adbe6d618e6ddd72810a6d4aeb4f19055b10b2ace280b0059a685aa288c1e46b449a4baea7137b69fe9e979a66d0a3e36e","ssdeep":"","tlshash":"2081518e772ad5b8c6e415cbd4c728190f79a9da6844f44fc29bec683ee78d13128217","first_seen":"2026-05-31T17:07:47.057264Z","last_seen":"2026-05-31T17:07:47.057264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/v1/api/pay/getCurrencyRate","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v1/api/pay/getCurrencyRate HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 96\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e5b05062437e32bc80e2ced5d903fb3a","sha1":"758d884766ba4d6a8b08c09f337491deb140be5c","sha256":"a980c1d74f332b35316525d510037c1c6f1c478fe8ec001d574fe569b7d31ca5","sha512":"2d8567a16576eac983ba490f86be172e71a31652c93068011396a13ef289a1293ba2cb075de1419d6c648ccc35c285ec579f5edb690f358d8ebb5dc9c6260f20","ssdeep":"","tlshash":"ccb01245de6890e3d511d001411effc56d68306382c0032098dc47189644175e042426","first_seen":"2026-05-31T17:07:47.059293Z","last_seen":"2026-05-31T17:07:47.059293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-36ac775f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.204Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-36ac775f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-716\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":246,"dns":0,"connect":93,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-3602d8eb.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.888Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-3602d8eb.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-18a9\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-056337cb.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.913Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-056337cb.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1046\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":534,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-78a86ef1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.037Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-78a86ef1.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-162c\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/ref-826e0ba1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.045Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/ref-826e0ba1.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-86c\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.325Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/ExchangeController-95d3f0e9.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1279\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-22248626.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.050Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-22248626.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c03\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":275,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-39a44663.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.067Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-39a44663.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/w3m-modal-a765f42e.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-42e1\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-5ba2403b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.342Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-5ba2403b.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-104d\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: a04792ef497976ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-05-31T17:09:56.317935Z","times_seen":355,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":101,"dns":2,"connect":5,"send":0,"wait":58,"receive":15,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: a04792ef6a0f76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-05-31T17:09:56.326155Z","times_seen":316,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":119,"dns":6,"connect":5,"send":0,"wait":60,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-36ac775f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.564Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-36ac775f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/home-f7f6e3ca.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-716\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e1b9a5f8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.856Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e1b9a5f8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bb2\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/receive-316eb367.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/receive-316eb367.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-19dd\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-458e75c8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.902Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-458e75c8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-774\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/w3m-modal-a765f42e.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.912Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/w3m-modal-a765f42e.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-b44f\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dot.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dot.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IO46c2RKX5K4yeEvD/NkSbPn2fIYWj/4R/WsZNgoJJEHrjzOFjieBazSrpwgUXY5c/mRXzWh8WYwgVMOJxMFu31obxyhw6k9\r\nx-amz-request-id: QCKQPX7KKZ0TPQT3\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:58:32 GMT\r\nETag: \"ecbeee3b982b8166e9b11ef7f85a9bdc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbeee3b982b8166e9b11ef7f85a9bdc","sha1":"79c69d70b46af0d2eb0447096fb9ef48873d24b0","sha256":"2d212db8dacb8164a85eec84c39038a4013d398d1fdbc680399c260a013f52a5","sha512":"6a47534c5310fbded78567b1860c94d6bd07e2e186fd7fb5057431d45b5fc80f580fc6ba4a5782e034243d2c9f1f47dc732dfab74551fc14f52b0a40e11b9472","ssdeep":"","tlshash":"d6518591b339d2b8b005f7fe023a6cb1ab926de27e33c5a55bd60c14d04740d8a925f7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-05-31T17:09:56.349268Z","times_seen":727,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":685,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/property-6708c68b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.711Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/PhQuestion-25ab6f67.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-4547\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-05-31T17:09:56.310085Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/v1/api/config/platformConfig","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:14.653Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 3831\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cf14d2c85bac1a3af5ed8a0fa7b51429","sha1":"a6870017b1b0a7a505afedd2079ba2d9854b2f23","sha256":"b275c500e02f6bd173f7f1870f100341e7e833944d78e55c93c46c22b53fcb97","sha512":"9c20902ef542c2aa0022d097187ff5adbe6d618e6ddd72810a6d4aeb4f19055b10b2ace280b0059a685aa288c1e46b449a4baea7137b69fe9e979a66d0a3e36e","ssdeep":"","tlshash":"2081518e772ad5b8c6e415cbd4c728190f79a9da6844f44fc29bec683ee78d13128217","first_seen":"2026-05-31T17:07:47.057264Z","last_seen":"2026-05-31T17:07:47.057264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/if-defined-49fb0c54.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.023Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/if-defined-49fb0c54.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/receive-316eb367.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 161\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"697bc72e-a1\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-bd925ac8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.338Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-bd925ac8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-19ab\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fe82323f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.344Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fe82323f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-593\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 910\r\ncf-ray: a04792f22b7275ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21307\r\ncache-control: public, max-age=31536000\r\netag: \"cfmeYviP6kCNFgjEWLRBgPUJnDfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=366+0 c=0+3 v=2026.5.8 l=910 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-05-31T17:09:56.308242Z","times_seen":524,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ada.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ada.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UKIVS/4iF9LhNOEFlr5/34Ph5bQEoE/QnUGq5dOL5sshh48oTGoGcseDQqbPuYdKyJ81j04umhAkdaFhCEMWRkeKdqNBMZg8\r\nx-amz-request-id: QCKXEK4415KYJXCT\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:08:07 GMT\r\nETag: \"958ad0ab023fedd13301398a46f0ea98\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6511\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"958ad0ab023fedd13301398a46f0ea98","sha1":"1f006086eb1afdeecc534e1f9990435502080c98","sha256":"2f91923ef20d262b5fc74abf33fdffb7888e7cbce646e0380122825cb872f410","sha512":"819afddd9ee026b64182974f5e80c349651953e593725109b1d723884f4bd463e83d8443a8a22ad1b9ed76dbff6456071d19c5ec2787b4673d9c7bc6da4389bc","ssdeep":"96:HEENXWNXq2E8vTAd/IOZVMa/zSdv/RPk9WUvykuM+Xw7zROT02yrnfqzE:jXW02ELNIOZSe2M+Xw7oPSqY","tlshash":"25d1735973faa3b8b001e7fe87a794617a4529e36912d574c3b60e00ea8503d4efa853","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-05-31T17:09:56.221685Z","times_seen":198,"resource_available":false,"data":null}},"time_used":1279,"timings":{"blocked":995,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/VerticalTickers-be1df74f.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.192Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/VerticalTickers-be1df74f.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-14af\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5294)","md5":"440cdeabbb9eab724c17f0b5beae3338","sha1":"4c99f5d4947c5450a2d24d49aa1f5784a6216b26","sha256":"be1df74f1c54fed82321f93f8c4813ebf34185b3e4076ee17c0f759ee15bfae6","sha512":"e5e18c4697a9c2e62fb24c35ce7df30295281af626884d5cc8c5efe85fff78d4b50cde4c4b1a56938438f0acaaa250ba8e6a6d666d942be0a9a8d3694d26afe3","ssdeep":"96:yl3R5eATYYFMhn81C8Z888kFXPPbsckvWZGqzJTtTlhI:yl3R5eCYYFMh8f2fkFXPPQvWZGqzJTVw","tlshash":"91b1772b63d61f19d133dd041be9225a83a8d1b3d2b523e8a4905b258bcbf0e15f3286","first_seen":"2025-12-10T07:39:13.841218Z","last_seen":"2026-05-31T17:09:56.246728Z","times_seen":34,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fc69a8b8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.896Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fc69a8b8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1363\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e1b9a5f8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.040Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e1b9a5f8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bb2\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-67b7a897.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.046Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-67b7a897.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1008\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e569eff5.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.208Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e569eff5.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c1d\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":592,"timings":{"blocked":242,"dns":0,"connect":93,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/send-7c4c9d57.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.841Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/send-7c4c9d57.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-8337\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-39a44663.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.895Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-39a44663.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-42e1\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/w3m-modal-a765f42e.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.919Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/w3m-modal-a765f42e.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-fb848e84.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-b44f\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bone.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bone.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dTj8UersAu+urPNVTfJX/DD85njHe2JWwRJ21YbJV3GA7oIepeJG5drAoJyrkUULtn4delYjfhAFBj9s5whHbaW5XiCJYZpD\r\nx-amz-request-id: QCKTP8VRWGHMMKHH\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Thu, 05 Jan 2023 05:37:41 GMT\r\nETag: \"3c335279a6cf73c3947a05b71e83ba1d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 53957\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53957,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c335279a6cf73c3947a05b71e83ba1d","sha1":"b59ad0c11cec77b11ce7b08ac3f244e84c2ec0d5","sha256":"083b7872dce2acdfb2dbc4bbef367d7545e5331ddd0d4dbe86c50d770e2b776e","sha512":"0b00f82985185f1577f14be2e3cea878ad7e8c7ad03e51a2356304aa1816ef61e6d4c067a2becfab32cb11d8ce531a5519714fd178610ea7d598bbe97ae8e5a2","ssdeep":"768:4QIFYPg2OHJMDmqsgVnRd4sSUT0A40ZK4lkULDR5Cf0PNsUaqqvavAbItNsELv6:Mkg2OHoVdH2swA4Y3ZVsUaqmaobI0Em","tlshash":"b333f19b0e3f32bf0c35391a51fe22570b5f2c9c925886dc5a089949721bb243b3866e","first_seen":"2025-07-05T16:42:06.938712Z","last_seen":"2026-05-31T17:09:56.200415Z","times_seen":74,"resource_available":false,"data":null}},"time_used":1802,"timings":{"blocked":1262,"dns":0,"connect":0,"send":0,"wait":280,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fc1e2a83.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.332Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fc1e2a83.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-f2b\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: a04792ef69e176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-05-31T17:09:56.260874Z","times_seen":316,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":113,"dns":7,"connect":13,"send":0,"wait":66,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\ncf-ray: a04792ef789875ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 32609\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=316+0 c=0+3 v=2026.5.11 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-05-31T17:09:56.336319Z","times_seen":1356,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":11,"dns":6,"connect":16,"send":0,"wait":48,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-b8f4bc3c.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.910Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-b8f4bc3c.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-b3df\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-d51bd663.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.051Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-d51bd663.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-12eb\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a04792ef689475ab-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3225\r\ncache-control: public, max-age=43200\r\nexpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nlast-modified: Sun, 31 May 2026 16:13:31 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbf39dceeefd4e7b837a0d5954c94910","sha1":"4853dffc66c53275b73fb2219ed5723a5d6831d6","sha256":"1627d4121b7cb00b96ee320b37893b30d6e0a2e89f93a21bc43522e9599b6bbb","sha512":"86fe88adca5689e8c3ceeadbdb61ae7ab42c6ced4756256d278f0d151977ddcd3c1f9b5b1444a87fcf258602d04b866136aa339d83f4342dae002de9eccdeb0f","ssdeep":"","tlshash":"5290025138485e1cdb491c59f04a7a52604c149324100f7590c05b0446a44361700474","first_seen":"2025-04-08T11:31:59.266604Z","last_seen":"2026-05-31T17:09:56.347832Z","times_seen":58,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhX-3214edf4.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.602Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-9c2\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-05-31T17:09:56.261773Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexx.com/","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-31T17:07:12.630Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T20:30:57.900416Z","times_seen":15975082,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":1,"connect":93,"send":0,"wait":0,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e49b3847.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.044Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e49b3847.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-4f6\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-d4dcf123.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.051Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-d4dcf123.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-9cf\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-3e85285e.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.052Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-3e85285e.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-628\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e1f7db2a.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.328Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e1f7db2a.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-814c\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/property-6708c68b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.601Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-4547\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-05-31T17:09:56.310085Z","times_seen":27,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/home-63fcf511.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.199Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/home-63fcf511.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-51ae\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20909)","md5":"e1a77679fd99e12512a35232dbf92aa6","sha1":"77441572a20128abe7782df6c3b89838eebf6789","sha256":"63fcf51164f4fa3b19d1522f6188ce6457ee8cfd82b92cc35c8d58eee9b6e6b8","sha512":"54286dd64ed38c4589bd5550b00b5484552b25d4a38a4e81cfd740abdd179b257888b58932c761a63dedcae7192e97c9f5ca7306085e92404a310dc5f7fc5d5c","ssdeep":"192:qkMJJ0w3boMvGOYRiwvkYrIonYSL2U93/tG8lUQ+iNCZp:q7ByiwvkYEonYifv08y4NW","tlshash":"0892317b220a331ce137de505be91254a328d533e21226fd5465792acfcbbc222f675b","first_seen":"2026-02-04T16:46:53.772916Z","last_seen":"2026-05-31T17:09:56.256005Z","times_seen":15,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-9a611939.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.205Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-9a611939.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-141f\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e1f7db2a.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e1f7db2a.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-814c\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":357,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-8d97d39f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.207Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-8d97d39f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1b23\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":243,"dns":0,"connect":93,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kihjVkbSEX+x7/Di5LXMRa7MIBMGWyNrEHjrGbWVDfTJzlBVmPENEh3gdJ0kmeCxaHxCoX9DUW39/90I463H0y6fNTvcIBL4\r\nx-amz-request-id: QCKM71N7TRCHP6R4\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-05-31T17:09:56.23792Z","times_seen":481,"resource_available":false,"data":null}},"time_used":1766,"timings":{"blocked":742,"dns":17,"connect":260,"send":0,"wait":280,"receive":0,"ssl":465},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1992\r\ncf-ray: a04792f22b6c75ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 48782\r\ncache-control: public, max-age=31536000\r\netag: \"cfctNhB4Bi9Sx1OSjZpNEcxaPsfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=424+0 c=1+1 v=2026.5.8 l=1992 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-05-31T17:09:56.239653Z","times_seen":550,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhCheck-1cb2a956.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.613Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-83e\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-05-31T17:09:56.311751Z","times_seen":27,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/v1/api/exchange/getSymbolConfig","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.651Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 7844\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7844,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bde5ff3022c1218c9537c32d693c3b69","sha1":"3a3149832d9daacaa9d9c780594923d5cb567292","sha256":"73e63b53a68d423111c7a62957bfc7ce9d68e4c3b6a77b7e01aa4d0529577b0b","sha512":"f8b363cd8ff1505eead3e08878172d22043484a525c194bfec00bb304c790db0f72df0bf795d8e16329df455947462346bad7a6dae30a042df998a51ba83b48c","ssdeep":"192:D+Ps6bPJ/gqBhXfPldHGZ38DoQx5DvidJD:oPJFHy4xM","tlshash":"a2f1ca4527215bafc530a0c21cd23bdc496f65a62cc61a46e5fedeae8344cef3523722","first_seen":"2026-05-31T17:07:47.139201Z","last_seen":"2026-05-31T17:07:47.139201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/HelpersUtil-27422063.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.898Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/HelpersUtil-27422063.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c7c\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-cd74709b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.904Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-cd74709b.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-568\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SGpAtWJxMcKWGHwxC53ypezL4lJVhlTXhcZq5pdrBIwNsmdP7XS7tI8GGXXV/b4ns+XjkrfhvzlpPfB2ega8fkTJ5lDShV0Q\r\nx-amz-request-id: QCKW7RG5C5XN4KVK\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-05-31T17:09:56.210189Z","times_seen":219,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":966,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5zb7bFtqSKAflm+jRFPy94zN5Z/Tf5N//O62Ub+Wn1pPEycZI1+drc0Vdkr+tnLBRDHOLCCNh6ZVkTvygTFqVrvEDaLlJTAr\r\nx-amz-request-id: QCKG2P5W3HR1GPG2\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-05-31T17:09:56.3511Z","times_seen":577,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":968,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1020\r\ncf-ray: a04792ef689075ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 42921\r\ncache-control: public, max-age=31536000\r\netag: \"cflmU5jeS0gZTTUT6JXX89Y_wKfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=555+0 c=1+2 v=2026.5.11 l=1020 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d08a4e1724ddbbaf3ee6372a6cc5dca","sha1":"ae18af289498c86d780f29f792e5dd1576239c87","sha256":"d1839a6158939a008a3bed2480ae5fc4a3ccc818b0bad78375758b5da90ebdae","sha512":"fcd457f698b2328da1e36faa98f33e6c5932ee3e3038d64e1fcd49cd3592ec87c57f17c4b751e258a0f2b6abb645d1ef840c73ef6d1e2bf617319faf2369d6c5","ssdeep":"","tlshash":"da11a878a4171e44e1712f1699ee33e9dd263c5648dd8133f062e6904017847a2383df","first_seen":"2025-01-22T15:25:28.962767Z","last_seen":"2026-05-31T17:09:56.233202Z","times_seen":1177,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.621Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-73a416b1.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-7a3\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-05-31T17:09:56.290564Z","times_seen":27,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fb848e84.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:13.350Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fb848e84.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:13 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-30df23\"\r\nExpires: Mon, 01 Jun 2026 05:07:13 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ed392eab10f59a361e11f290df7acfa","sha1":"27b5fb75333bb1c7fc0841e5413dc2b44b943548","sha256":"b8f2c49318dddf6b9f3c897486962f79f782e080c274765e904b33ede191db8a","sha512":"75b6f057a4a7a79edc8a96487cf19281fe185c141fae55be4688843a1f79857be26f8ae99bd8279eb4d5655f6015bd45eef193f5d02784e0c3091f48190ef2cf","ssdeep":"24576:KL3j5T1gVPH+H3wogAWurnTMmw0ERirdxQR1lcMDZ6UzxU:KL3j5T1gIH3wo9nXw0ERirdxQR1lcsU","tlshash":"7d454a09d1ca239d0a7344e5b48933c17c69cce5e68e8d7b86fcd72821f59d492ecba4","first_seen":"2026-05-31T17:07:47.146227Z","last_seen":"2026-05-31T17:07:47.146227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":633,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/if-defined-49fb0c54.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.858Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/if-defined-49fb0c54.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 161\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"697bc72e-a1\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3090\r\ncf-ray: a04792ef789e75ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15557\r\ncache-control: public, max-age=31536000\r\netag: \"cfmK10fIs0rtXK3D1w_qZdnstVfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=461+0 c=0+8 v=2026.5.9 l=3090 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8e093ad4a0e0bf420966897e5d52611","sha1":"90172a764ff649c9553d8e84ada46adcb73f33ed","sha256":"4a00efea74245ceacea37a3e83f0a4a2830236143357d3c57e96c4dd154d593f","sha512":"50b07fcc6d1c5460e69613f4509eb8323b11b6634ea8f268bf541eeec6271bfc5852200c34f385ad82d44c3e3f70122e783f1669d9d356d65be4ee82a20d6546","ssdeep":"","tlshash":"d7515d250e57bb7f0fa7793b2e97c313955320052e06b200b624f75101940863bf35da","first_seen":"2025-01-22T15:25:28.982905Z","last_seen":"2026-05-31T17:09:56.189874Z","times_seen":1135,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":118,"dns":7,"connect":4,"send":0,"wait":44,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a04792ef88a575ab-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3578\r\ncache-control: public, max-age=43200\r\nexpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nlast-modified: Sun, 31 May 2026 16:07:38 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"83c79e57023102c06f159dc38aa6576a","sha1":"666310869db97c815801ae3e09216d8582375c5a","sha256":"c08ccb5df5489ffe00b1fe96863426d7dcb96f199d7345bf74ec8498a85ab7a7","sha512":"9160eea47df5e0774bb3db22f1287e34e78d2f5bfc96e2e75f9a11671efcef4b686de7c9e1bb11e0f8ea6b39a23c5f5a8d0731404d7e52c15454d6aed83e16c1","ssdeep":"","tlshash":"8d51539e57809dab5f349788e14cf9dac83ed00786cc58ea64f2853440fe863b3119a6","first_seen":"2026-03-12T03:41:14.103704Z","last_seen":"2026-05-31T17:09:56.358256Z","times_seen":19,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":67,"dns":5,"connect":3,"send":0,"wait":119,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\ncf-ray: a04792f22b6f75ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17759\r\ncache-control: public, max-age=31536000\r\netag: \"cfNST3q60e3DEaxemhB1mMC8dRfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=332+0 c=0+4 v=2026.5.10 l=1264 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-05-31T17:09:56.193419Z","times_seen":512,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e569eff5.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.569Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e569eff5.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/home-f7f6e3ca.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c1d\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bch.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bch.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rWehaD9tK0ywe0SvAEQfB0A1ILlUFpPtCza/AHKa9b5bSmptutPJ893OeIXUel8pKBHyplchbjP546g4gLYpOS9o1x1hiUoj\r\nx-amz-request-id: QCKVXMZFNXWMPAM5\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:30:25 GMT\r\nETag: \"a62c25ec1acb1fc3718098578b388808\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1953\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62c25ec1acb1fc3718098578b388808","sha1":"5ca0181b69511c10a14f3927fec31a9ceb00f067","sha256":"d600c9ea66bcc09bb7c8462506b8946cf3afe92cb717ee86ee2d660a154653d7","sha512":"4fdc1adf49350c2f5362f58b469651a926221e7b642292f672a7bb25de1ed25a4e26c5b709fbc4232d3a03d9b19681a8e24b13d92a009b295f79231e3a90709d","ssdeep":"","tlshash":"ae412e60b3aa557df410d3f88a2da0b17e733c823c25d10e9af60929a66181da030cc7","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-05-31T17:09:56.242637Z","times_seen":254,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":994,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: a04792ef497e76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-05-31T17:09:56.204374Z","times_seen":352,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":96,"dns":2,"connect":5,"send":0,"wait":59,"receive":2,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\ncf-ray: a04792f23b7b75ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 45092\r\ncache-control: public, max-age=31536000\r\netag: \"cfUhkIr6pXeZzg1ZKkKbDihKqDfmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=11+0 c=3+2 v=2026.5.4 l=454 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0be57955d7f50dd9f7754b6dc10309f","sha1":"1120733df2e8f9bfde2f713c1de00711d356d4ef","sha256":"a29fe26a43771dee6d0de34f06c4aa118119e919a370bf6b37b89d89eb157547","sha512":"b115424fbd8acbdaa1fa6efc5e7f9b447adaa80ea67d542fd77c68fa0748f993670f6befa7458019db1243b2056f03872c714a500260333b50fd2aec778fc95b","ssdeep":"","tlshash":"02f05c1dc884c9a0bb9834cbe8a2089b02504ea0cba61a320a052dca102f45b0d5aa71","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-05-31T17:09:56.222668Z","times_seen":444,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhCheck-1cb2a956.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.616Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-73a416b1.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-83e\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-05-31T17:09:56.311751Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fc1e2a83.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.904Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fc1e2a83.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-f2b\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":426,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-3602d8eb.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-3602d8eb.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-18a9\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-458e75c8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.329Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-458e75c8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-774\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: a04792ef49aa76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-05-31T17:09:56.323923Z","times_seen":353,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":108,"dns":3,"connect":1,"send":0,"wait":54,"receive":3,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhX-3214edf4.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.611Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-73a416b1.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-9c2\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-05-31T17:09:56.261773Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a04792ef688f75ab-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3578\r\ncache-control: public, max-age=43200\r\nexpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nlast-modified: Sun, 31 May 2026 16:07:38 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5765,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"52da1e4f30daa47ced00b7a0272bfeaf","sha1":"5d3ae7ab212c0fb7b3d1a5385106cb0153215898","sha256":"a086ef57ee841393b806774677d15f5ac2326111d632a841eb7d0c01d6708c8f","sha512":"352430ee5e35477c1a23f1716ea44eda60649064e1f913af383475936132fb32302bff562ee21b7a29c192ab0e66d3e0668845759ff0961804ca4c94f6f6b657","ssdeep":"96:Y+NbhiWUmyvx9JwTUmo5OkvoyM79hT4bRQ8osJohKlR8iqpmavlT:YlwyJv4xo5Rwb78V1fJl5ZadT","tlshash":"1ac1319e4bd0adaa8f34c784e56cf9eec52ee007c1ccacd995b0893541fe4a77641126","first_seen":"2026-05-31T17:07:47.152453Z","last_seen":"2026-05-31T17:09:56.304408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":103,"dns":5,"connect":3,"send":0,"wait":135,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/purify.es-ee0e7e34.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.209Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-559f\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-05-31T17:09:56.234054Z","times_seen":36,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":241,"dns":0,"connect":93,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-22248626.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.891Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-22248626.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c03\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/index-a167d81f.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:13.351Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/index-a167d81f.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:13 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-5008e\"\r\nExpires: Mon, 01 Jun 2026 05:07:13 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2d09189a49549645194cf0b3b99fb96","sha1":"6938d2e35b3c9cb35ac93380d467c456107b57ad","sha256":"a167d81f47a399c1b5d31c91b3ed423e76f169d53319cfa73824284309d3ba67","sha512":"e23dc771ace21aed0d2a95e8b6f8e8bb365ef088a4481dc8df083954b38aa2ad519a39d94c720b477a9c4fc124d1021b1bc1b0923c70bab5eecc540cd853da33","ssdeep":"1536:OFsJM2FDrx3WqyrtpqoSWEDZsIyNBi3MFYaQj73rx3WqyrtpqoSWEDZtKCE0Zz1V:O0DrxmNH9yDuN0rxmNH9yD+Gfj0+","tlshash":"5b64c36aa690527cbf17faa497ce96d8f23ce5b2dd01dae8f10051184fc3bf50663606","first_seen":"2026-02-04T16:46:53.775438Z","last_seen":"2026-05-31T17:09:56.211542Z","times_seen":23,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/index-21b53c44.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.194Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/index-21b53c44.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1b4f\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6990)","md5":"4c5be293d21e28e6defc1f29ca14d0c7","sha1":"0519ba50e2bad057e581c8656f2931735c9ab39d","sha256":"21b53c444ab715f26559331069112c974ab29f75c03f3e886da16d426835b429","sha512":"34060427eaa86c6e8a53065165954a217a76002118f4e42ffbc5d9ad9d68ab67d3f2cccc7fafb347108bcd069ce0f5e8bea4f5b429f0a6173183949a9e3c5cf1","ssdeep":"96:xuUFdLcu/dhPG3OMj2s5LqOsXzmXOX5Xis:EUFdLd/dhPQzas5OOsXzmXOX5Xis","tlshash":"2ee10d27110a2208f233ce8857e4976486b9e527d20616ed62713826cfd7fc727e638f","first_seen":"2026-02-04T16:46:53.860881Z","last_seen":"2026-05-31T17:09:56.282598Z","times_seen":27,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-73a416b1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.844Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-73a416b1.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-dc69\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/ref-826e0ba1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.869Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/ref-826e0ba1.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-86c\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/SwapController-128e9645.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.886Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/SwapController-128e9645.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-35f8\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-f72c7cd8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.899Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-f72c7cd8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-afd\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":332,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fe82323f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.909Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fe82323f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-593\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":443,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: a04792ef395d76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-05-31T17:09:56.285933Z","times_seen":316,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/home-f7f6e3ca.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.457Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/home-f7f6e3ca.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-fb848e84.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-58f3\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-41281e13.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.903Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-41281e13.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-f7e\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":423,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bsv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bsv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: j+D/HwtxbZrCwhQOGGa/B0V4GjLRlvkcY99cj6YS9AGtE7cm4923N2G3VENW3Y5sDJhYIFMhZ3ZbQ/pOTHkBx4UmpWOXDsMb\r\nx-amz-request-id: QCKJZ2DHMYHZ3THT\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:36:30 GMT\r\nETag: \"0a6c14a948ec11e6b3bc19ae2aed7c22\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1817\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a6c14a948ec11e6b3bc19ae2aed7c22","sha1":"0f79ca42c47a7a37253f23b608fcfbc2493dd84b","sha256":"fdb30ade7093c96b4c5968e4a3721388c3be1e0325266645f40a995d8667486c","sha512":"3d6acc8ed9dae0981c23574fb5319dc64591b22082392253e9da74f64832f45cafd2db8a652d40478edbf2752c22576938acd4757d6ce293c34653b4e79e8233","ssdeep":"","tlshash":"78312555a370f368b904b3f8d36494b1752664fbb253d50896fe2125fb4881e0cfb98b","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-05-31T17:09:56.287656Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":706,"dns":8,"connect":262,"send":0,"wait":293,"receive":0,"ssl":431},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\ncf-ray: a04792ef78a275ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12565\r\ncache-control: public, max-age=31536000\r\netag: \"cfCUkmfLSHImn0WVCsJt7FCSUffmDcyauXnchu_YTSDQ\"\r\nexpires: Mon, 31 May 2027 17:07:17 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=386+0 c=0+1 v=2026.5.4 l=374 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a12155c6bad8cc78944c7bfee468b1","sha1":"3684a6988254eeebb4ee2df16fe1d053e07995b0","sha256":"09eafc5ea66462e38244d77d3c57b5f09a16d5de53ada131c1f847ecc869887a","sha512":"cbd356e3a836732175d690418bc1e48eb99cd9d673d21ca092ed1e6d698a9b69fac87072890f892af66375dc903af2c21e29ed31408114609861c059e1e48225","ssdeep":"","tlshash":"7ee0608a2235d2000ec0fb00682b20ab92ec3554bbf30930981aeb2204a7302e342ebc","first_seen":"2025-11-29T02:31:10.911784Z","last_seen":"2026-05-31T17:09:56.237052Z","times_seen":48,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-73a416b1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.020Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-73a416b1.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/receive-316eb367.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-dc69\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2MTK1Ze1s4QQlUhmOBj0a6kLbjiqJBw0eyjhWMi90h7HGc8VidV1tWapAhb6QN8SA8MVbEMaiin6WoW1f57Qts6csFd5wyO+\r\nx-amz-request-id: QCKHGS57AZNDYY8H\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-05-31T17:09:56.254999Z","times_seen":380,"resource_available":false,"data":null}},"time_used":1535,"timings":{"blocked":1244,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fb575795.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.321Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fb575795.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bdc\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/home-f7f6e3ca.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.202Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/home-f7f6e3ca.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-58f3\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":248,"dns":0,"connect":93,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/index-3cd34980.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.183Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/index-3cd34980.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-6bb\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1722)","md5":"8954e8e993c0cb85e470210a616216fd","sha1":"f7c0e384e8782c24e248cc13b4b9bd2394e779d0","sha256":"3cd349806396c6cbd9d6d50d68e9c265823560f0e9402ac67009406e9dd034f6","sha512":"83edd994300f5877052174f1ad511ad9e75d0d86d510478316925da888a7ccaeab1b53e15d0635be48422bb28dc41439b3374aef940c54d25fea70442669b41b","ssdeep":"","tlshash":"2431252ef6e063385e3e697057da1dd4e33e84208d629094fd62e424cac76b202729e6","first_seen":"2025-12-10T07:39:13.890273Z","last_seen":"2026-05-31T17:09:56.363951Z","times_seen":33,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/css/index-c074926d.css","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.186Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/index-c074926d.css HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-876\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2165)","md5":"24fcaa8d1efba01db124557375dc628a","sha1":"323606a4765566ff4891b9fc0107607f387b266b","sha256":"c074926db6a49f8c4dd30fa9a9101326e20a337c8aaeaa0203be8d5673ee1e55","sha512":"0cb578a5fe13704683a3d987520f9031e4df2459c38b313dce492fdb3f0686df4896168d1463566032864e56c9ffc20e10e1d6f478d9fc7b64134db34afeb937","ssdeep":"","tlshash":"79417d3be8906637d823b51497d916c4913cf1727da049e971283918cbabbf4031b30b","first_seen":"2024-08-20T09:17:43.593605Z","last_seen":"2026-05-31T17:09:56.202492Z","times_seen":37,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-d4dcf123.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.892Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-d4dcf123.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-9cf\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-7b62a5ba.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.047Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-7b62a5ba.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bc7\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhInfo-6eb82573.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.615Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-73a416b1.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-ad8\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-05-31T17:09:56.226511Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/purify.es-ee0e7e34.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.570Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/home-f7f6e3ca.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-559f\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-05-31T17:09:56.234054Z","times_seen":36,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-fb575795.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.900Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-fb575795.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bdc\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":335,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/sui.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/sui.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5EttmHFHuzUupsr8JI+fiJycD5jcZGZg06rAvod4VuuYhbVQrG8XpFxKa4TDHyP4sQjTUhfTbXjc9yrBWenuCLR6nbQiB+zw\r\nx-amz-request-id: QCKYJMVBWX94JVPP\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Wed, 03 May 2023 02:12:27 GMT\r\nETag: \"4ecd0b491a611abad73010840bc6cfff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1547\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ecd0b491a611abad73010840bc6cfff","sha1":"b8067340a437daa9fcf8bac9e718d5955e3049ac","sha256":"7c02270653440d5120b208cd79c2778ebe629b3d3528df0c61cbfa00b97a43a2","sha512":"b307646522b4518266e8960820e34eea4c4a27fa230f69ad0bd0b2b15b330fcf03500654e1913303a62ba7d5378a000329b6c08d31428854dac293aa00c9afd7","ssdeep":"","tlshash":"be3123ad279df57a8400eb38824b14703ad37cd66b05d43c67f42e5ada1905f26a168b","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-05-31T17:09:56.254067Z","times_seen":142,"resource_available":false,"data":null}},"time_used":1820,"timings":{"blocked":767,"dns":6,"connect":268,"send":0,"wait":285,"receive":0,"ssl":492},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800, s-maxage=900\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04792ef789a75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d624ae72d5da08a9698cf19ed1004a52","sha1":"d2da4fc91b5567dfa523c551f8b8501b43d0384a","sha256":"68df83e68b02e91713d9e5b52a22c297d98ec2d5acda0c37cb47162547cf35db","sha512":"90aa31b4915827753f86420e7b64e4f7685df1bf06908974128eb66b8699e549781120077589005dc68e9fd726c8904fb322695755e997ba1dd28a0b90e77d58","ssdeep":"","tlshash":"9a90020520487596c052c631c21157075d258e732d1460345025090990bb4750841823","first_seen":"2024-07-15T21:15:20Z","last_seen":"2026-05-31T17:09:56.362115Z","times_seen":452,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":116,"dns":9,"connect":4,"send":0,"wait":225,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.610Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-73a416b1.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-cf3\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-05-31T17:09:56.262642Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-9a611939.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.565Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-9a611939.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/home-f7f6e3ca.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-141f\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-e741169d.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.877Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-e741169d.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-c3b\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-2886c057.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.894Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-2886c057.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-7477\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-a147cb61.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.918Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-a147cb61.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-fb848e84.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-38263\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-41281e13.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.067Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-41281e13.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/w3m-modal-a765f42e.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-f7e\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":351,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.13.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uA%2FvQo%2FsLHSRiLds9vhwsUppnv8mu7JQGgHo1SuY8sZcoiE%2FpbI%2B0i%2Blk3XKhhJ6%2Bn088glZ5U49N4nCCcvbFlJc7fNBWdjNowuFXSkZ0iGIhC0IcKYsdVMVwbToQUcIEX1gpA%3D%3D\"}]}\r\nage: 109887\r\nlast-modified: Sat, 30 May 2026 10:35:48 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04792ed3a20fe97-AMS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e96920da89cc922274247fcd293696f","sha1":"84896a016118ac7d371cf40b55601c9b2ea16e08","sha256":"03818c009e623cf4b6169657f9cb99bcd53e89fe152cc1809154c5d018982e8f","sha512":"99764c35f30fa0ffa84d012975cbe5c977d1272b6f9cc25cf47ad25f0a27446fff2ec7cf9dfadc74714a97df2089c1fdeeed8f39a38ca0d49db04b9baf815ede","ssdeep":"","tlshash":"2a11bde12e3ca3ae80c7438e855641669b2f73f571064c901b3ca5323105becf883928","first_seen":"2025-09-06T11:46:38.597902Z","last_seen":"2026-05-31T17:09:56.263515Z","times_seen":85,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":303,"dns":0,"connect":23,"send":0,"wait":33,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.346Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 69\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"697bc72e-45\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-05-31T17:09:56.289313Z","times_seen":47,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:27.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 21:24:31 GMT","end":"Thu, 09 Jul 2026 22:24:14 GMT"},"fingerprint":{"sha1":"14:D5:ED:85:23:60:DF:07:0F:87:F6:27:31:48:57:E7:3D:EC:B3:51","sha256":"98:75:A7:34:74:35:55:95:78:E2:84:28:02:E1:7F:C5:BF:C2:D6:6B:1B:9E:63:9E:E8:16:BE:13:A2:E4:17:22"}}},"request":{"raw":"POST /batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 777\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":777,"data":"[{\"eventId\":\"d0787c56-41b7-4014-bbb0-de4731902e47\",\"url\":\"http://krakexx.com/index.html#/Home\",\"domain\":\"krakexx.com\",\"timestamp\":1780247237544,\"props\":{\"type\":\"track\",\"event\":\"MODAL_OPEN\",\"properties\":{\"connected\":false,\"caipNetworkId\":\"eip155:1\"}}},{\"eventId\":\"cbec9c26-6e68-45af-ac92-288a3fba425f\",\"url\":\"http://krakexx.com/index.html#/Home\",\"domain\":\"krakexx.com\",\"timestamp\":1780247247546,\"props\":{\"type\":\"track\",\"event\":\"WALLET_IMPRESSION_V2\",\"items\":[{\"name\":\"Binance Wallet\",\"walletRank\":\"10\",\"rdnsId\":\"com.binance.wallet\",\"view\":\"Connect\",\"displayIndex\":\"2\"},{\"name\":\"MetaMask\",\"walletRank\":\"20\",\"rdnsId\":\"io.metamask\",\"view\":\"Connect\",\"displayIndex\":\"0\"},{\"name\":\"Trust Wallet\",\"walletRank\":\"40\",\"rdnsId\":\"com.trustwallet.app\",\"view\":\"Connect\",\"displayIndex\":\"1\"}]}}]"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Sun, 31 May 2026 17:07:27 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a04793315d2c0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T20:30:57.900416Z","times_seen":15975082,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":107,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/send-7c4c9d57.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.916Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/send-7c4c9d57.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-fb848e84.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-8337\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-23a43da0.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.048Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-23a43da0.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/send-7c4c9d57.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-127e\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-f72c7cd8.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.317Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-f72c7cd8.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-afd\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-cd74709b.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.336Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-cd74709b.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-568\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:17.619Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-7a3\"\r\nExpires: Mon, 01 Jun 2026 05:07:17 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-05-31T17:09:56.290564Z","times_seen":27,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/favicon.ico","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/","date":"2026-05-31T17:07:13.142Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-31T20:24:43.005921Z","times_seen":519313,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/manifest.webmanifest","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.169Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 461\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"697bc72e-1cd\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-05-31T17:09:56.201149Z","times_seen":28,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-bc8c8fdc.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.069Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-bc8c8fdc.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/w3m-modal-a765f42e.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-bcf\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2X1WvsP/0sASlAZIMtZ2rMFZfCC5ML65odIwK+mHz3wT0OTciHu/U4CxALJUTox0snh5II/CrAnKwKtKcgeZzE03RWhkk+6w\r\nx-amz-request-id: QCKHQ9GF7B8XF2PZ\r\nDate: Sun, 31 May 2026 17:07:18 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-05-31T17:09:56.29225Z","times_seen":458,"resource_available":false,"data":null}},"time_used":1735,"timings":{"blocked":727,"dns":18,"connect":257,"send":0,"wait":279,"receive":0,"ssl":451},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-b8f4bc3c.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.346Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-b8f4bc3c.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/index-a147cb61.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-b3df\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:16.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://krakexx.com/\r\nOrigin: http://krakexx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 17:07:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: a04792ef395976ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-05-31T17:09:56.284276Z","times_seen":316,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":92,"dns":4,"connect":1,"send":0,"wait":55,"receive":3,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/VerticalTickers-27d43059.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.567Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/VerticalTickers-27d43059.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://krakexx.com/static/js/home-f7f6e3ca.js\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-59ea\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/index-78a86ef1.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index-78a86ef1.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-162c\"\r\nExpires: Mon, 01 Jun 2026 05:07:15 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"krakexx.com/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexx.com","domain":"krakexx.com","tld":"com"},"ip":{"addr":"3.95.67.58","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://krakexx.com/index.html#","date":"2026-05-31T17:07:15.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/ExchangeController-95d3f0e9.js HTTP/1.1\r\nHost: krakexx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://krakexx.com/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 31 May 2026 17:07:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"697bc72e-1279\"\r\nExpires: Mon, 01 Jun 2026 05:07:16 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":357,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"krakexx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}