{"report_id":"8602d639-32d8-425b-b449-880e0397d2fc","version":6,"status":"done","tags":[],"date":"2026-01-19T12:14:49Z","url":{"schema":"http","addr":"krab3-cc.ru/","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"104.21.0.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krab3-cc.ru/","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"title":"Kraken новое официальное зеркало krab1 cc и krab1 at","dom":{"size":175286,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20649)","md5":"698f63e192f54c62fcb0b60bbb1ab334","sha1":"ad21bc537d1a84e3de45daa009a29eae7443fe91","sha256":"59c5c8f58ea48410dc017bb808f2430bba6a1836f80fe9fbd67f7c92425e5176","sha512":"bd27829ed2f77a0bce68d2448ca50d00443985a383fe10234ddc29a6bb53928522b93e16ad921b21b098112e0c6d15a37ade975ee2baa360e328293651106066","ssdeep":"3072:Zh+GzMGdGZnbjemlUVug8mLGTAq+5m+HWv5J9jw:VzbdGZnbjemlUVug8m6um+HWa","tlshash":"9504c560936c48fa385fdb5dc40cf71eb144ea65ef0a57d6b0e4e058a8c8db944b760e","dom_hash":"domhashda477ec8a06e76d7e22fbdffe81dfaa6","first_seen":"2025-12-20T07:06:13.850748Z","last_seen":"2026-01-19T12:14:53.549421Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krab3-cc.ru/","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"104.21.0.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-23T12:14:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"krab3-cc.ru","ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2025-12-20T07:06:07.960617Z","last_seen":"2025-12-20T07:06:07.960617Z","alert_count":80,"request_count":40,"received_data":1516372,"sent_data":18878,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab3-cc.ru/wp-block-template-skip-link-js-after","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"49e21c4add6c4905b5a79343fea00e5d","sha1":"fa7d0d6c08c2e3753aa65a338df38a7b498da27c","sha256":"7afe00519328c580f197fc9a063cb634720a794b59d9f6826eb066e6ce9334f5","sha512":"a12e3979d1eca340213202e8d0c98d015705715c4dbcaa93e8407a2e96b132323f1004da10d17e09e54048248a168f92b320f8eb898e56e057d4c27e752a5b7d","ssdeep":"","tlshash":"d24179d4f21506b40165293dc4385f89e2b929a8f6db1ca7cc0c9c1ca1b255f4676e7e","size":2179,"data":"","first_seen":"2025-12-20T07:06:13.931156Z","last_seen":"2026-03-28T22:56:40.261123Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/js/accordion.js","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf0ee93e9c5df3e2872bb9db3f16778d","sha1":"3fc234e6705f56f4a51c9a17976cffe1b5e4c7c3","sha256":"995f445e3a47fb381651366c1031f1f1eac58ad671f3e54eb456f7f4106de667","sha512":"346902491f0d6cb697dbee7142b14be973d2e3b21460ea98852efa64fd033bd686d730fa224a82cab1862b891ec22a0f00811d67e21de33c49e7b098e4ce9660","ssdeep":"96:PzeC3v/xpJrEIK6U1KtxfHhiF9ZH09MMShSi6MdU7PNYY7:PyU/xpJrEIK6wKtxfBiF9ZU9MMShSi67","tlshash":"4891a928a27024bb846f9266859fe3eb31617047e35c94493a5dc6ac13d8e7074f27f7","size":4303,"data":"","first_seen":"2025-11-13T07:21:42.245297Z","last_seen":"2026-07-09T23:09:16.862209Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb81994b14f0cef78f5c6626cf94edb2","sha1":"6934d37f0b09bd6f071e7724f85abcd3bd8e8fbf","sha256":"6c1108f702360ecae828bea59a982a763121e7e9a20013f0c430708cd4bba7f4","sha512":"5644760254127c9496189e1ef4dced8b8fa6f512f115243db1c4c38f0f2d93e520447d8ff876b11930339c81d90a88ca4aca32e98f42ceba5d8ff1b52518fd98","ssdeep":"","tlshash":"ebf020a63c894134c3b3126a3bb39244307d292f740f9d10f98c18913f8187218ab91c","size":557,"data":"","first_seen":"2025-12-20T07:06:13.932443Z","last_seen":"2026-03-28T22:56:40.261992Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-10T23:00:49.969402Z","times_seen":11703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/js/wp-emoji-loader.min.js","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"669738a3e8704c71fa95d02c04959036","sha1":"dcfd4677ab86424b399ef1a01835803c8f08cef7","sha256":"6327c9320c34f686186cefa3f609b7e12cdc1587ccd5d937667ce1eae5e8db4b","sha512":"5f9fdaad984416e3bcc755cc87544600c9ed17f0b4c64af7dbb5af51c3e507411dcb4d698853f5d09b43a2acdaa48df8b0af672cab93515b3f6c0e0e8f8859ac","ssdeep":"","tlshash":"b781859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea31418b5893c274a46","size":4046,"data":"","first_seen":"2025-12-20T07:06:13.933813Z","last_seen":"2026-07-25T16:51:27.379421Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","size":41076,"data":"","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-08-10T23:00:50.015396Z","times_seen":3655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/js/accordion.js","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/js/accordion.js HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1229\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"10cf-6469972824606-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrWPR%2FjZXYMaY5oeC9BflIW8CpDWec1XPAbn9JbhYvFpdI0XwfQLk%2FsW%2B%2BYUwXmjpxIv1q2GJM259NqKVTiv5wzTVu8SzG5FJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407babab0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4303,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"cf0ee93e9c5df3e2872bb9db3f16778d","sha1":"3fc234e6705f56f4a51c9a17976cffe1b5e4c7c3","sha256":"995f445e3a47fb381651366c1031f1f1eac58ad671f3e54eb456f7f4106de667","sha512":"346902491f0d6cb697dbee7142b14be973d2e3b21460ea98852efa64fd033bd686d730fa224a82cab1862b891ec22a0f00811d67e21de33c49e7b098e4ce9660","ssdeep":"96:PzeC3v/xpJrEIK6U1KtxfHhiF9ZH09MMShSi6MdU7PNYY7:PyU/xpJrEIK6wKtxfBiF9ZU9MMShSi67","tlshash":"4891a928a27024bb846f9266859fe3eb31617047e35c94493a5dc6ac13d8e7074f27f7","first_seen":"2025-11-13T07:21:42.245297Z","last_seen":"2026-07-09T23:09:16.862209Z","times_seen":12,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:28.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:29 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynHlNchwtIZJIc%2FUFBUnY4wj9Gt4jgKJUv3VPhKlfkdGX1AshbKEOxbqmrSOiKD9ipNS5lVvX6uATAjhPntUIkATK4L%2FcBv%2Brw%3D%3D\"}]}\r\ncf-ray: 9c0640859c350b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f2476c4627112d56d337c969cb713a5e","sha1":"d775fc34ff742c5c419331cfa11153b7493663bf","sha256":"d936a9f2d85ed3311b71f259b56d5c3875ee7b45a2e15aecc23cc2fb7c597557","sha512":"64c6f0bffbf5e196aac6bc79996131da1972ebf0264171e515c07bdff401d5540806d02c555d82529aef60bfd5665a6568271bb80db4a156c4413c0e2150e630","ssdeep":"","tlshash":"f6d02bee904362874812147039c115c3274d12faa83a41a82d86d487529853ecd9a5d9","first_seen":"2025-12-20T07:06:13.929175Z","last_seen":"2026-01-19T12:14:53.55424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/fbrfg/apple-touch-icon.png","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:29.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/apple-touch-icon.png HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11388\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"2c7c-646997282f5ce\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cL3M%2Fp5JKRKjykne%2BKaNb5VPfUjkk8u%2Bavzb%2F77ztInRRWU5qh8ikCSF1UEEJkL45tlDIjiv2wGSdbCA3MLkH3%2Fw3lv8H0jsdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0640884c400b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b795eb9c7980fee87dcd4d319e238280","sha1":"47dc2254e304d1311261f423bf196db2d295f487","sha256":"74aa040cc938c80b0e7470710131cb71e47eb84fe2d1c8c49ec79c06a87b6041","sha512":"a6cad8f0bde79bffa04bd5c6ef605688eeaa94b24d8515052b6fc77f8cb1e694f4eba2505406b128b335680ba4c1ac73c22d1b1b55fac97303b659f5f9d74518","ssdeep":"192:Sklr9c+6HXeVaCQ/VXro+Y4lkI2EV4O95WGHzE5n40acXddSdYnthfa:z9clXCS/VXFaIvC6nzs4+DIyhS","tlshash":"a132b084f24c5331d87ee6b7e219eeb5f3dede5d8d151742018ea30a9eb15432197c50","first_seen":"2025-12-20T07:06:13.863707Z","last_seen":"2026-07-22T17:35:50.089094Z","times_seen":7,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/tick-c.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/tick-c.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"396-646997282e246\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsEJqOgKrl%2BaECGBP%2FaT%2Bg6bGTTfhwFdcXYyeEt19ez6Uaz5%2FuH5DuzpeKQ2IzS913VIIaVzw9arYsYwFPHeyl%2BDzb4Y1E0uxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b7b900b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":918,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cfa6523196f2d15611bf13992f74ea5","sha1":"d403af2412561ce5509d4a435783fc4ee9a975df","sha256":"5168ee7f67cc128aa1351bab7d50a3fa6e2158ef40df8daf6bcd0daa319f916c","sha512":"220ddb896f04aa92771712c2392a9071a3a80145935545902db31e866cda3ed95ad33ac1dddaae28c1c797e95a4c0c6bcdf50bd4cdc88203787737abbce12aed","ssdeep":"","tlshash":"6e119cb7f7cca2e0c7c5c3e7a4b5d451132b716539919a0990f049e0f2444dd8c8fd84","first_seen":"2025-12-20T07:06:13.882745Z","last_seen":"2026-03-28T22:56:40.206108Z","times_seen":5,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/ea845d5c62e611f0b9e5ee782335b9da_1-min.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ea845d5c62e611f0b9e5ee782335b9da_1-min.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65273\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"fef9-64699728347d6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cxsrCv8pt61Tpiy8LT8raQUMF3gw%2B07iusc%2F7QRQOCe3IX29fS3oYL7y%2FTL73K6cDtZvFNIu4W2xf%2B8pDnvsvzPJAYqfLom5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65273,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x896, components 3","md5":"7ee3e30afa1f8b81391c5f17c64faa20","sha1":"bed103c512b32ad4a0fadcf1c98badde222c9abc","sha256":"7fde0b54723a4bdd9dde9dbb38cad7a354a96d8e672665947b6ed6c9f6ba5214","sha512":"8f37dd93da92f7feed87c36f41175348b115d0f736452546402b5298700b1262b7086db8ba9726eaead93ea1a9d339b75f2dec2777ec833e45954f35f7ad7b04","ssdeep":"1536:efMaf5NipAaWm5A6rzJsxStPxtn3s/XLXweXK8:eEahIDJsxStP3WLlL","tlshash":"14530269a1b95629fb114470ce8b4dbe5a27a2e5d120ecbf04ce971adb3f04ce3b0535","first_seen":"2025-12-20T07:06:13.887581Z","last_seen":"2026-03-28T22:56:40.216074Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/3f3347ca323511f082258203bf9b1d68_1-min.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/3f3347ca323511f082258203bf9b1d68_1-min.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56564\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"dcf4-6469972830186\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhzFngorGZPj3ZNOzTj1z%2B9cgAtMLYyX1N2XLiYJjs1xMjbVU6Rg0iARMnSIZ1LqKCBKOwUkS%2BfPyHRl4X6cGDcE0AsAjyotew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 896x1152, components 3","md5":"32d79f724232bc355b0398b8a6e6b3aa","sha1":"f8823bc9729abd64c75a532250f0778132bf90a2","sha256":"36454e7d753f72606d0dd22e5dd6c2c771c6f4ad79e2a6e18d7927b34eef2798","sha512":"d25b1235ab74ecd6393fe01506f65770e17903b824f2e43f3d4019c40b0bff66cb034e24ece3bc7acc9e61f09069d4254faa8c23a8835702b07cf3921fbdc601","ssdeep":"1536:fuwLlYsIuZ8c4UMU8oO+4RJZE1CIulDrBM04ptG4LHV:mw59IxeMU8L+0gtIxM04pg4x","tlshash":"e34302482f739119dd48e8fac82e13d1a35d6b3b05339d9b9493aa87a364c8332f05f5","first_seen":"2025-12-20T07:06:13.888999Z","last_seen":"2026-03-28T22:56:40.211785Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/mVR2uf41LyUI6GIr5Tyh_TzNcQCoRvYfGODsIE9g3ulb_jjKeiUP3dszUzMnsZZ5urnph7uR.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/mVR2uf41LyUI6GIr5Tyh_TzNcQCoRvYfGODsIE9g3ulb_jjKeiUP3dszUzMnsZZ5urnph7uR.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7298\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"1c82-6469972832896\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6vQynG7F%2FAsUjSrVBDuSb4bnDwhWTOfE1S%2B5jfeTCbjvpsyZvsf0SLrModVCSlWHg8SbBsbn0qDog1LKOW%2FU6Ksjt7S1vjteA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba70b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"00776f80e1fa8c083569ff84296a6b7e","sha1":"66fd3151a1413ee855aa44e0b073fc53d26ae341","sha256":"e618c4887c5b93706d30939a8bf229ff865308906f6cc69562024ba5af8978f8","sha512":"23b5e6fce17ac65b7f018c85998e965be24918e63d9ec7c2c60a5785fa95ab6c48153aa2bc00bf645d0c6a70cc04dc05945d5ffbcd04fe6d21095e96d80bec15","ssdeep":"192:pbOsmLFjCyufeCiG1cWlNHj4IIG+iKfNsXW+p4WkSS/:pu5SeRENHjrIGJdH6Wkt/","tlshash":"d2e18d0a3eab44804453477b71e354f3c7871efd23b82bbc1d1ca2a6d041248c68abae","first_seen":"2025-12-20T07:06:13.902638Z","last_seen":"2026-06-24T17:25:48.975447Z","times_seen":7,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":879,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14955\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"a074-6469972861696-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8epOZd6UkDq1gjhpqFNive%2F%2BMnCwpSEf1YH8eJwLurfgEr4HbX0Y6ml0oXCcGdV5ZvexUhfHLZve9YJcie69HIzdw%2FWB6ETSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0640801bc50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41076,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41076), with no line terminators","md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-08-10T23:00:50.015396Z","times_seen":3655,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":805,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-19T12:14:26.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 12:14:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i14r%2BIIk2JY1Z7ENKyIi026G4K3Wo1zSp%2Fudv5R8l3b%2FXvYUx7MmFmyGyjT1AjXBG%2FNDRHq1SfNJCo0Nk1HzHr0q4MuW3fE8YDke\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c0640754f3b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":176270,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20649), with CRLF line terminators","md5":"f3eb9c7ddd9dca135550e008d499f72b","sha1":"fa449c636d20a3ac818c1049327aafb00df574dd","sha256":"cb141c3bbc2310d096e369f0e13e9235b276cf556bb379682c09caacb3975a63","sha512":"37513d34000bdf8a63d1430e56103b7d9525430dc7710999f357e8b4b076af5919f8189e06cdb282d3e7f50ae26bf7b5f1a4a220682520cbd6776fb8839f9d57","ssdeep":"1536:trFpTVypMsxAyjZmg+BJTt1x4XD+1O4n4GJXPEmKBeyDtJLCHy26fDz/+mjjVDWO:pU+GYMqZvbuemlUVugjhReTU+UmqKZo4","tlshash":"c004c560536c4cfa386fd76dc00cfb19f144ea65ef0a53e6b0a4e15aa4c8db944b760e","first_seen":"2025-12-20T07:06:13.880436Z","last_seen":"2026-01-19T12:14:53.563314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":37,"dns":18,"connect":1,"send":0,"wait":808,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/logo-kraken.png","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/logo-kraken.png HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 4295\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"10c7-6469972830956\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FvDolbkAQW7uVocYQZwzsLW6jCcI1dTATuQDleDaJgbEXkGgVHqSOjscX%2BoD7mFXXb1k9hGIQ904EBWe9eSE1FZtCeTQ%2F%2FuYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b7b8d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 55, 8-bit gray+alpha, non-interlaced","md5":"d176bb8a5dce4e184f493dea617fae0d","sha1":"593153105056bf4c4c7b276cbcd1c5c0de5eb138","sha256":"4fb59d62dff1abcd1b134a22e31d824c21d46ef841041b84cb99d25e4b2aaa25","sha512":"3c21a08290ba2d7997f4c7f17c5299ac651e2399c161ad399ffc7289aa078e9090934f9bb6c2b1a2cfe9977ce9ae1eee551643425cab819ba78b14e6f7734303","ssdeep":"96:8Sh8knmWI0a8uJH7RHINVMFdlnyRBtLg7rLSgbs0SZqiTgRLwg:8SGknsJbRZnMMn+gbrSQiTULwg","tlshash":"fd911a0dee609cc0544e960799d6f19a6633fd5247c2e012acedd8125c604bbca7c0c6","first_seen":"2025-06-25T21:40:26.008523Z","last_seen":"2026-08-06T00:02:12.588489Z","times_seen":100,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/09.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/09.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67066\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"105fa-6469972836ee6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLr966nzcZJGhSiMiK1aBhYNLG6pOUYUT%2Ffcra82SdIJqM%2BAbAJ3PpUsvG%2F7IEekk5%2FNCRbQOPpSVJ9SP3wTS8bWHf7z1iO3Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b7b920b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5a976b51d5d28d2405925dfa3b4e424","sha1":"ac088285d9f88047f7468b5956cadf544619309e","sha256":"c3f0c6263e378db37dec1fb9ac0511ed9203f8774a3197898ff1790329fdd84d","sha512":"069b4da0b1e0268a6b13c3a8e50dccd1e843c58b126c1c74c2dd55c3735a06dcee0a9e17a0e44ed691fd0271c97f256a7da9b6e46daa8c23ba89ed6503e60756","ssdeep":"1536:9JJfzuw2Afgp8e7FKvZB4Ibhg2MBD+pFPzfNWr7aqi:9JJfzuw2AgJRYPbLYDy9TNWrur","tlshash":"dc630226db1b9855cdbe7638e4faeb0942739738e36606513dbc940a3b852c5ac8f053","first_seen":"2025-12-20T07:06:13.914726Z","last_seen":"2026-08-06T00:02:12.584819Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/10.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/10.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38248\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"9568-6469972831cde\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4rfLDWCKQeeJCk8n4k2IyisZ2SMbudyYD9irHmz8syafBlTLguwzhdjCocQGO2sRMAvyw9cdbynuDuDUDj15rETLuS9caY72A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b9a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97de6f8dbd96be812459d7cbb61138db","sha1":"589907e4fc879d917d0a5c08e2ba98775fbc85dc","sha256":"a9e4576b524e99bdc22aeb7a5e3ace7b81ac8220c35439ed89b6e16fb1521c1b","sha512":"d9358973be5511457abfdf457252e76891c63435002d00a2c052e651dff3d88a3c591b5a21988789359b607dd80553d1d4ca4473fe02b4c8073336d7d62de611","ssdeep":"768:eYytYytYyAZgh8eYUS7hsjFVsCs7m4cuawvnEWjIokior44:eJJUZgi+pVsJm3tMror44","tlshash":"5103e12dbf637971dae7613468e8de5592632a58fb13160a74bc2a0173813934ecd2cf","first_seen":"2025-12-20T07:06:13.86021Z","last_seen":"2026-08-06T00:02:12.584147Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1163,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/02.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/02.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37242\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"917a-6469972832c7e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7AD1wVCRksY3AlCwnY75felRjeFbXf3xWdXAIC0Yd7TiUQnJc25JqX6ZanmHhx3dmnlROD%2FoRl7gH9NtYYn6YUFevVA7jRBMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b9b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3581ae9b83cfd3656fcf038790e5d6ad","sha1":"d7ebf4bc6b90666c54003eeea82d9ebc6d95220e","sha256":"bb31f2f95334c5a94798c1c3196bb11fc70068422fa0fe22e1b12f5b01173423","sha512":"57df10bfc66903a52b687fd18bcd7e26264d3faca25a2d77465bc8ca3b7a3f641eae94155cd6f4d7a6a99eae323867edc2bd0df332398bb2c3134f190a90afef","ssdeep":"768:8YytYytYyt52G48te8iOlCP23LpN1z4n4+Iqtwtx1FyMQveGj:8JJX2Hae8iIRX1knnZwtx1IMQ7j","tlshash":"47f2f134af77d631ddf48778ade0eae06492da28db2752c1b95c1c006b901ac9bce04f","first_seen":"2025-12-20T07:06:13.907749Z","last_seen":"2026-07-16T16:04:13.375607Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/3.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/3.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"ba0-646997282980e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAmCyQuaaffPs3J3CnexFYGOdBmQvlBx3ThcqGzorY7q0gVuQ2QJb2dIckRq59HMNX8Vt7PmkIItV6AgQYvBZ%2Fu8OoTpiqSuzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b9b9e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2976,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddbe44171ea9c539bf595a78bf50ff96","sha1":"2bf47ecbbce327852fd281762afb10595abe29f0","sha256":"3a2c4d6f53c9ac598b630dd0307c7e43f8182114a01482f377cc870bbdbc4f96","sha512":"9c67385ca39e3a5cb05855e8c9daf1d4c852a538cd7294890476da708e445542d2c336e4f89d2e1da77daa8d5d9f3f15840345cae8a0653c2a21cc62ee3ee1e0","ssdeep":"","tlshash":"c151cd486304723ab09843ccc77a7059e5a86cf2d6306299a7e655bdd22d9cc88f7cdb","first_seen":"2025-12-20T07:06:13.875243Z","last_seen":"2026-03-28T22:56:40.237803Z","times_seen":5,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":935,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/593680dc3a1311f0851baa21ebb699bc_1-min.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/593680dc3a1311f0851baa21ebb699bc_1-min.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62892\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"f5ac-6469972836afe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJUFc2Urd1rbPhEPbcbMkBGqCGi1rArvzorfGBoyIX1bwKFtwzwDKv304u047cAluhdeMN1ZVDRfk6WT2aJvthUEAdcIDIhGSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba30b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62892,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 896x1152, components 3","md5":"a34e1d26a65a5f716f892270f519e154","sha1":"79d75e11955c9d44590b2306f6efe19203ce4290","sha256":"1de17f497188e6ab7cff2e887d285c86c78e5fa524bd5c54c034b18c569c267c","sha512":"f240c8e3916188a9e2f97dc5ca4711eb214fd0e84c440079d77d7ff362889ee0fae1079406305357f88f455d49d9955b86aa672ff94487ba148951ad8d01705c","ssdeep":"1536:y2q0YboiccIhXWwvN+t8NKrB+9EL4p8+5gTRr0tT:y2vYbodnWwvN+t8oE9Y4p8+cq","tlshash":"025302253e94bd3ffad081441f251e81d34c78fb3b7c964b0a899676b67c02e69079a8","first_seen":"2025-12-20T07:06:13.854787Z","last_seen":"2026-03-28T22:56:40.239319Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1135,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1y4iY1M2xLER.woff2","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:28.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1y4iY1M2xLER.woff2 HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59572\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"e8b4-646997282fd9e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a920f%2BkjfT65B3DDUainfk914JSaKPz3eOKxlHFDaBi8kRNeS6dzQe2peGnyftmCJcICsvHDQADZV4xQw53bcgrz5nMJikhS7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0640811bca0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59572, version 1.0","md5":"c072969415ad9ea20efbcdf094fa0859","sha1":"17617df398142a7c67aa23a42e77e733abc15507","sha256":"c8bb9fed34d88f4baca16ec2935499f9be3831e0149faa98bc2418d53e67da96","sha512":"0cc9bbc1884d06b8ab3b81d8c3459e4ced42e19fa6156fe8bdef028c5a9dbff29b77952376a53574812f2aa9440aeb5c85fceeb5ff0e7759402715327349962e","ssdeep":"1536:zzhPQHLrKed6I/qUM6TjIcjLBzlrU+V7rCUtIuU5Zy:zafKeXqTojIUl1OUdqZy","tlshash":"2d430283c1ca49f6066c3d55186bdafefa513a605ed08262e59f45c84c3d6fa9e2b0c8","first_seen":"2025-12-20T07:06:13.926944Z","last_seen":"2026-08-10T13:39:48.085828Z","times_seen":35,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":432,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/style.css?ver=6.9","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/style.css?ver=6.9 HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 1003\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"709-646997282f1e6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cLvwJVsLxZbrLHcpP%2BbTbcPO37GrJJVPsQDNfenA2g3rrv5K29yt1E4QL4E2%2F95Vc3SLiOwdCsdpoQLoDW9jSt3wYkNCThlcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b7b8c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (815)","md5":"bfa3df7004fd0c37eee0c4763917417d","sha1":"12546a9ab92148c4a62538a81f073a22dd43ab3c","sha256":"ecf9eed41eb54e11103495253318f7b6988e97dfb6a7764a5d01e56ec0b30849","sha512":"3ef72558d399ac7a9c572aa134a0ab7ecfa67313938e3957828fececf3840017d49e0c19eb2eac3f036805002a3015c92038a7ff3eea9e222f2ec37f9b71dd5b","ssdeep":"","tlshash":"c731b548ab34dbad2bc2030af1f65a09e25dc100dfdd44e1d51f822a1b7d32961fb785","first_seen":"2025-12-20T07:06:13.865865Z","last_seen":"2026-07-09T23:09:16.86095Z","times_seen":10,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/08.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/08.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44796\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"aefc-6469972835b5e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfcVw%2FysgyclpPIlTZ4shwD3T8SUonjt1NS%2F7R4uo3kBSrdUT3uSC0hmROG%2FnOBHJyM7T%2F20tem0hnz9KbcakVkpB%2FOC72iJTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b940b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b8d7f4bf052431d5bd6b795ea247b56","sha1":"57dd9676d7722647df0c545a5c88cc7003384a17","sha256":"c01219f7ebf90f4b64cad8b37bbbfb9663230130e979e27c1a3b99c009f6b20e","sha512":"91fbea29986c1983f1dde717735fa5aae89187e1ea78a778be3a0bdf31b780e51658ab2ea1fbf98937d112a1b1a9e5ac361f9daf10c04508fc4350c2367380ec","ssdeep":"768:bYytYytYyMjvWBirEhQd/VJPuL3CKCxBeYfe8VkEB9Xl1fRdbDhyW8/fC:bJJr2VVJK3+B1fjC+XjQWgfC","tlshash":"8413d1399e526903cfe99930fdf8af8592635748ef635492feac1e167b853441c8c0ca","first_seen":"2025-12-20T07:06:13.868088Z","last_seen":"2026-07-16T16:04:13.310967Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1141,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/1.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/1.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"73d-646997282de5e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHH7aim2FYOGcLicx%2B9OkcE0FvEXuZsNExHuNalsdMLR8C1jQglKWQeRSAy8M1Xnls3rrJc%2FG3yxord5Uh4Y9SAkv6qw91foWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b8b9d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20bec1425cfdf7f3d126b092cca0b726","sha1":"30b7124b2eb90ace4f51e4efb7be2cc818414968","sha256":"30d6833ae9c6ba60a65df7c72e1b2522934e78f61a68a56f5887de49d46025c2","sha512":"9ed4e85f8f26489d631b389f88b0a4dfcba7e6dfb771bc33d7160b9824781cb921c97592fb3ab9c6eb686d51b282b0edbcb399368012b7a0af6ae98062677e06","ssdeep":"","tlshash":"e3310b482304313a729803c4a77ff1a5e5f974bad76c3289ea6144bca13e5cdd8b78d9","first_seen":"2025-12-20T07:06:13.922852Z","last_seen":"2026-03-28T22:56:40.236982Z","times_seen":5,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/2.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/2.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"d7a-6469972828c56\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shVcITP3eelJ4NaQIFNeUyT60%2BNn9AZxDfoTt2CV6gZ4S9v0CxU4PZl1mf21PsMPImhIX4To4zULshtoESPSN7bYG1BQTIMJLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b9b9f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c71f0c8e1aa71ffeb1272efcdf3edde2","sha1":"ff72d98bb1339e99009c412c131db99d34ac7be8","sha256":"629408d2139387d81f571e5cd158038652a6ea8fb81f85a25c6d6d1253c45ca0","sha512":"204a6a61ebacbd8277b896e73a444e3b20c132e93d071aab406d10f998dbbd87342757ebd31e9c0afa21c8469c41d480d168a9ce35c5a4fe07e44204aa8b3fb0","ssdeep":"","tlshash":"5e611145a3453278b08953d8c36fb0b5a4e96cf7e625a689976408bcd11e48c88b7cdf","first_seen":"2025-12-20T07:06:13.886359Z","last_seen":"2026-03-28T22:56:40.224237Z","times_seen":5,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/8edad80462e611f0afded6507ac75966_1-min.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/8edad80462e611f0afded6507ac75966_1-min.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68408\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"10b38-64699728324ae\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAj7IOr1U5lFkkP87riLPe1itMOKfc3TIgvJFYJJ%2BteYt6dnoSnMQqkE5kCQhF%2Fbqb87EPIiRaz3Y%2B7238Bs2%2Bvdmcpp1nC48Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x896, components 3","md5":"764b180b1bbd2d1accfbf7b1e44ee695","sha1":"daabf1e7b22e596b4441a3d1b5d3c4897b0c8c38","sha256":"d0fa16f97f95be12e5987a383cf7c3bc07b8030b07fa30061e97646475c27a2e","sha512":"4701ffd58133c47dd21a863a95591d5461bc40c6aa89f402f0b0e883ba8bbea2058133e9811b2c4844c966dc07ca8c10a8c6c63aff0af55b9635b0952862d53f","ssdeep":"1536:8pz07KClmqvrNUlZ0ywBDSmmIHcimd+Pd1HzhgJQx:EwhxUlZ0tlxHcimd+PXHtEQx","tlshash":"1f63f1e654e7aca4efe0273e84c221760129657640a0e18d25f05b9a3aff291ccec77d","first_seen":"2025-12-20T07:06:13.853689Z","last_seen":"2026-03-28T22:56:40.241011Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1169\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"d49-64699728612ae-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyIDpv1cRv9g9P7fzP3CkdxqoRCnKpVtBLqu5tdoJsSV2WKdLOxZcBjJQUWf7FXW2luDqa4RpJtozFtLphFeRZeEwVfF%2Bj2g%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407babaa0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-10T23:00:49.969402Z","times_seen":11703,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/grid.png","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:28.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/grid.png HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 65871\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"1014f-646997282bb36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HK5%2F7RSQnh2MKiR%2Fa6Dxos96zloHfVcTlR20ntj8qOkPaRZ6J%2BsvcHnOXOvW3rHXAV0K71woTW3z70dCCb3vdztGyTlodhXVKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0640810bc80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1508 x 976, 8-bit/color RGBA, non-interlaced","md5":"d277daab6a23c5d7bbfdb39f22f7187b","sha1":"950942d567713e554189fc476c14ac42145b37e1","sha256":"d4efec8d37c84c64bf126bc5e4dd17e914466866ed68c94344b3b5a387a467f1","sha512":"7e6a0bad0d7b52a5577c56a4c96173ca61035252e7f82979eca256b633334346ef4e12229aa4d6f2f17509e48fff850fa5f30084548004ef7126271020c633d1","ssdeep":"1536:7a5ojIsVTZ7YTPcmear4WbXYfxWgbZ9V1quXD04p:7a5oEsVTZ7EPcmJEg29L","tlshash":"e05302f6601117f69a942d3464bf415f26aa0f24b695c44ce9fd0f738a29e398de4ec0","first_seen":"2025-12-20T07:06:13.876621Z","last_seen":"2026-03-28T22:56:40.242672Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/06.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/06.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44022\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"abf6-6469972833066\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkj1kiYUPdpNeuxsyX5hzk%2FyeihJxXOGnaS%2BoVHjSTbPxsWBGWw8rX83xJEgph%2BhyN5gr%2F9Yu%2FccnNy%2FNL3kSRykYdfFh81aFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b960b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"010c4de217d9aa924e37388f60bee58b","sha1":"7248d92ec3d998bf01a304ff169a3afc0655e00a","sha256":"239438d92204740b16401edbc8d31e1a9a7a9778a7c8a2dba446238f90cbb665","sha512":"2eaa9673db824911a67cf7565ab83e84f5df956ee7bdc140a75303e9a092a5405d2cc4bc79f05d739fa62c7e7c4f9326d8a97e19dd804ec58e256c48f2e6fdd0","ssdeep":"768:CYytYytYyX7U5LY0y8iydYQ47QLEC8/USs49hUBbaCTakNYK8xGtT:CJJz7U5LriWtLnaYzcGtT","tlshash":"2713e176b7276e12db56c938a8f4ca499263176a0ba145f43dfc5b5637801b489c028f","first_seen":"2025-12-20T07:06:13.873296Z","last_seen":"2026-08-06T00:02:12.589541Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/bb0aab2b62e611f08af4064c972fca13_1-min.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/bb0aab2b62e611f08af4064c972fca13_1-min.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65789\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"100fd-6469972834bbe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtbGKJGKm3S%2FfqNvIzS51JUOXSEcnp0%2FxvEm7fnI6Rm0XCm%2FsbufVmorOf0Uo4XMFjB6Wgw2GkPNsrwedlhfR6tmLpXR814mtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba10b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x896, components 3","md5":"b682b5ba7bd4ae460e21c15b63b5b5b5","sha1":"bf1ced026df1655abe32ec02a4d7cd7d88cb9bc6","sha256":"2b6be458cb2a239a47c5d798e3f025e0e4bca58bcd3f809601d18ae184f2acc4","sha512":"e2e744f2dcfc112096ff3cb073b0cd7d87dc6a391a100eb415d83317f2247b2192e54b700a07c36a51696a129ec20f1c936f12bc3d5dd1ee12a4e75ac0e814ca","ssdeep":"1536:XaPjAFfYM+lj2P8dl831A7Pag8gkFhrhlnsBg:MAFwvj2P8dzDryntln1","tlshash":"fa53021e2325139af40963be095bc57c0e84bf6575ee8e328cb95aaf63683f0349152c","first_seen":"2025-12-20T07:06:13.910051Z","last_seen":"2026-03-28T22:56:40.211105Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/long-right-arrow.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/long-right-arrow.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"279-646997282886e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFX%2FNOqev1H9OSpjErfpi0Szz3JB12QER01vTUEsWvviHQHXmCQBfV2fKwL7uZQlohElC%2Bf1jzqRNMcP9mMuOEItE4IWHBDX9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b9ba40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc0c6d9724223c540c994335c4b0a777","sha1":"34642398af0fc1a9f120903874b37467f1c7b8ed","sha256":"fea9cacf3213c53fb5ba2faf2e15fa5bf4e6e6dd1795ee3d1419e925765860dc","sha512":"08c17b186fbcdfd7c424edafe00e2fec22a9ad472b7d52b89a0d7aecf838703d4d38f3fad9d864f6a9f9ff0ac7eef6052a50c0391e06b86f6291d7c3938dc0c4","ssdeep":"","tlshash":"93f09988e3ac50ba9c858be9dff4abc2918f30c140e08548c41428b7a34bdc92520ee8","first_seen":"2025-12-20T07:06:13.898686Z","last_seen":"2026-03-28T22:56:40.203899Z","times_seen":5,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/quote.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/quote.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"389-6469972827cb6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sP2CG9%2Be05W5jPEBNXn3F9XJrdz%2FqG%2FvevoeFm0eQUDTDZ2y5dHuT00%2Bj8jM9FbYb%2FQv0sZmsr%2BJto0ahApDgitrTVqGk%2FDbUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b9ba60b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"752b8ec337ea57d8ca8eb185e0821752","sha1":"821afae7f8e91792eb1946a43cb5e179d3ca38fb","sha256":"903c5686c63e71caa5c239a3cad6d4a817f5eb766f3e4d695b49d9b786fa86f3","sha512":"46c48a74bb13bd4dab352a53c1f4b59faa803837e9498c9cc71c030263e31f9905705b46fcc22839663eb52908103d81a830b94855754e81c0a2fe5bb0e96c50","ssdeep":"","tlshash":"431100de9afce46c544b86b0af34b298780e348925b60d909c481cb65102d58ab4bedc","first_seen":"2025-12-20T07:06:13.900575Z","last_seen":"2026-03-28T22:56:40.242071Z","times_seen":5,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/01.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/01.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62400\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"f3c0-64699728320c6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0gKZUAOpSXjJYXWDdDT2SDzjppQUJpQfToquWHq%2BCO7OQrMnzHKRB87XOlKjLe2F9t3M0PC4WlcxPiT%2Biy2CLvLCBZdZWkVQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b930b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79b26cc1609bf650423a6d3621c19bfb","sha1":"bf6da00fe93c99871bbf95cfb0ea6b21dc288e6a","sha256":"0a363e001574744473556012f6b663463aa90ba4c43ee061651598fab41dbf7a","sha512":"421a5ed27a05148978d330d5396843bba073d3257574ab95e813964bce6e52b5c5988749444ca095f44a507531fd895250807be6999a0f7a87af443e7c486fd9","ssdeep":"1536:IJJ6pHDOfSnx3RbF6xppLwERLexdLljS+a6YKiRj:IJJ6xDHF8pBknLHkX","tlshash":"1c53f29adf5bfb92dfedd07415a4a5a011128212e2138b0930fc2a0673a5355bf6f2cf","first_seen":"2025-12-20T07:06:13.918186Z","last_seen":"2026-08-06T00:02:12.592861Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/05.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/05.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71940\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"11904-646997283632e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccPhTz9HAKRztgFRlddH%2FqCIh9MsxdSG370SPHq0gKG2UbUGJPwIMjjMFJcqo1Yz%2BYF6zawqdARn39Nfdj92Sr62k74jYFnrbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b970b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7eda6a17c268cb6d970f1989e7f4716","sha1":"e3d5b46861ce1fcd65d1b2c9535b6de869246dda","sha256":"b4bf6bb842ed94053abf073c94a87cf7413c770c7971b0521f5c582c0d78dc44","sha512":"d0f8d4a47d0aa0b262d03a022fecd39327f5bf6a1fc7724bb16db717c2875a1996c594ca34e4c665dc9db56c1dd7deff2fd424c9374e1511a4c8e66724d1ddf0","ssdeep":"768:cYytYytYyOtIhC2DEzKNbxfskttrb9fuWDTcTffb5c3JB5r9LsY3y+GwDuDd9Qig:cJJkEdBvgDILskGpQrXLiyHEiue3bh","tlshash":"376302387f43ac03e5fbf930a8e426a4c7126f64ea5186397edc4c0673a01968d459bf","first_seen":"2025-12-20T07:06:13.871897Z","last_seen":"2026-07-16T16:04:13.316622Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/03.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/03.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41754\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"a31a-6469972830956\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7K78BOUz8FK%2BVTV4yo2keSS6kfcsf1VCtRZl0BLsiNEMS%2F4ORpE%2BGvNq8IBpWs56FnYymo8y7kSW12dd75mUr0SRrUAaa190RA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b990b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00071d1692c8287a443317ed05c43afb","sha1":"73275e98312518c9db05fe83014e2350c678554d","sha256":"2da7a0d233f93c658614931d9474c7eb40fc47bf52615a5114a10a08a5f29fa4","sha512":"26deb0faeb106ab469c5f03835a485dc677e55f801fa895175234216bcc9f0ee684ab316fd6a27173653bc83683a97f264928d704482c5c0ab04fd9adf3e7c64","ssdeep":"768:eYytYytYyDOnNTZJ1SqFHAhMW/dG5cMO8tdBOlpm41Y:eJJHOnFZJ1SQH1WgLCZ1Y","tlshash":"ec13f169bb63ef10eab4b63c28e4bd6502931512fb20d095bdbc8903ab631d0895e1c7","first_seen":"2025-12-20T07:06:13.896473Z","last_seen":"2026-08-06T00:02:12.58554Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0C4iY1M2xLER.woff2","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:28.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0C4iY1M2xLER.woff2 HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59452\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"e83c-6469972830186\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESh%2BKhGSgengKwtDBDyp45AUqCpBhRWavCfO13%2FLs255pmmk1wmGOq1860qMogiL8u8ZmbU03UvERg2t5VTyOnwdF0dkJSmThg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0640811bc90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59452, version 1.0","md5":"6ac7451b15c9f05a0c88d4b7372c1655","sha1":"6a00c7bb7650faf5b1cc8e0bc2182777b4d77365","sha256":"f6184a28049f5e03bd1c385eef1aa0ab4a334a4e25ada1fa6fb2650f3a2f7a11","sha512":"6ffc2775611fbdba356a7ec5aa3f1533d4c040a3757a68ca7201b4c6938a8cfe83dc296da23a4671c23251fa8b1ea9f73ed3d12c1893ddc76562d333ffd23821","ssdeep":"1536:adJOPemT+cbToDywkHVApU12CErlcN7NCHTbf:adJOpTfwkOWAhB8puX","tlshash":"764302f3e662d877d54dc2787e01a21ec908cb3d46a1beb36a5c51e084b02319a97e4f","first_seen":"2025-12-20T07:06:13.912618Z","last_seen":"2026-07-23T16:17:06.981699Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":804,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-includes/blocks/navigation/style.min.css?ver=6.9","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.9 HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 2305\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"41ef-6469972853406-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FXB%2B0shkMoMxcnt0LP0LUL4LwdE19UesIq9DNsdEuk2fTJ7Bzj9G7dURNHDOBYHC07xGfmoEYSQLIWVxhyqrpDkCpGxGjhdJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b7b8b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"9d20bf226422cb5168bef956e5eab9c0","sha1":"73d569bfcb92ba76ae987c3ac9c6d8cc091100be","sha256":"65433802260eba9a7ba737a21be6f679ab25480a3c6cc4e7f109041360cfb52e","sha512":"e8ac30913475c5a3c8ce98c1a0fd57a173c745d9adb94e84defd8116ad78835b4f8d27eff25391c1f3554c4e7485aa17bd139fe9bcd461873d30227b24e7548d","ssdeep":"384:OsFyo7/c9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7/c9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"b3729fd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-12-03T05:22:41.874716Z","last_seen":"2026-08-11T06:23:54.363031Z","times_seen":3302,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/6.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/6.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"1040-646997282bb36\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PScekE1Rkrs%2F%2Fcrj16pcD681Mh%2FQOK5vrCgLnCDOWDx5CqLkBS0T3W9NB2pQcRtIhZRZgCybPI6CLfSOEWtBNVp%2FnuGr%2BWQhFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b7b8f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4160,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04b432bd1b9ebe8c6c9d6ed00bd3dfb4","sha1":"a7619bdc1cca6bd8b9ab44422617dd7bcd429b6f","sha256":"c7f5650a12afb9a18583d0d0cdb24719b90947d980eb42fdc46567e54329ebd3","sha512":"8bb32e59e9a45ec9f74da8f34bd37ba6ab5c0001cd55a698e6356442a9c5fe639d38107258e3d00b073752231c0ed59d83728bd353ae244553679d1adcc9ed26","ssdeep":"96:KD+NQ6uCDmLWG78b1vy0Tarh3QWHgUnYfWS16RbrWBB35:KDqQ6NLnJjTUhAMgUnc2br4p","tlshash":"558186f7d28471c56647dfb0dc3bd9669b5e38be2fd28781c3509aa066300e29d8cc50","first_seen":"2025-12-20T07:06:13.905546Z","last_seen":"2026-03-28T22:56:40.234984Z","times_seen":5,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/07.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/07.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22226\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"56d2-646997283056e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1tgmZfvmE1kL0JZHHaFYeqtQiJxwtpjGAl0wlrKfHMDyxzSSKSlmxNdgSUuN6s3atPg9PRUncg7XtYHZuRhjpPFxvr4Fb8pI0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b950b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2113156e5e173469d92ad1e909e7e80d","sha1":"6bed382725127db907a68fa8fa8c0938f64f5cf3","sha256":"be6865b2004dde3aa782b0c2b11403b603b0f3baac126b96366dd4c7df662ae8","sha512":"4b05d1b843194e17269fd4c26c9bdbf069573f88786d993c638e6b46c1e892ffe99360a75062014f8c178d62dbebe48dc49c85d80805654bf58afb845e818895","ssdeep":"384:tYNg7BYNg7BYNg7vSU7wrV/o3+t2GHjpusczRiJWi+nyeDq2:tYytYytYyrZCV/uUju9byc","tlshash":"74a2ae79fb579d63eef7f534b8d8c79593a31214e31291c178ac1a229b80181ad8c0cb","first_seen":"2025-12-20T07:06:13.86957Z","last_seen":"2026-07-16T16:04:13.341428Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1164,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/themes/wp-cooper/assets/images/4.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/4.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"7d2-646997282bb36\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yv%2B7YBD%2Bm6QK3tsE%2FBQehEDNcuCpqC2pVAcTspRCUN1hosJpxlgJOmAossdRPTxC6MbQaP8zeG5kA8Sk0j2UW%2FnFcarp9U6u9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c06407b8b9c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb66e27096d7d5114a2c2f82eec6054","sha1":"66b6358e1128894d8349345f9427b39bc1aaf4a2","sha256":"415c4ed644346bface4ce5538cf1a49596e0d29a8e819c9dad7a7abf84a47c18","sha512":"a2a0da83fb682b318c54ae21ab7320d8c45ecb07c38059acb6dbf921760aea14e2b87953ba71d57be11593d25a5f2af96139b6cc86b3edb0e82880ac6530d163","ssdeep":"","tlshash":"2d41ec0db3453176b2280388e368f1a5b0ff28bad69a3745f562017d913c6ddc9bb8d9","first_seen":"2025-12-20T07:06:13.861812Z","last_seen":"2026-03-28T22:56:40.221408Z","times_seen":5,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/d_3cbd0858.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/d_3cbd0858.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3822\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"eee-6469972836afe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2Flqxqzp5Aja1IkB%2FMxXvmsAAi1hP4qHsMdtnQIO%2BDT1ibMM6N1G%2BTWxLzOISeNWfvniE1r%2FiU%2FLw6fiBKtIF4S3NBVQWzNDEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b9ba80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 100x100, components 3","md5":"148f9d6998e011272bbabbf273f9e528","sha1":"cc65f952ac9fa2110d3f8ba9ba82bab000ed5658","sha256":"d22e55e3fe4fa9263e82d74c0f44d61c29b3770bc39e9c7d59847befa8be73d1","sha512":"2285f20ce14af71862f7fa1cbc0d063533249eb095dcd49384bfba559de1346777f59c77fe0948d0cf9031022ae8ca00e032e47d461ecc816bbcb00a7ac76e15","ssdeep":"","tlshash":"aa717e98e4a0c7550d1f6dbdae8312539cdf37602f9d2a443d45c3a8e3a88c6947454e","first_seen":"2025-12-20T07:06:13.891023Z","last_seen":"2026-03-28T22:56:40.204754Z","times_seen":5,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/01ddd-1024x718.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/01ddd-1024x718.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 155017\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"25d89-6469972833066\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSZ%2FfUaELG35unWz57ow3GxSLOCtRrffRjMDNrwBVY33Bx%2FHZCCtrJhEqyyFS7F8S7NpftnhJ%2B%2BRnrPKBqrSpZfjEr74U5HKCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407baba90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155017,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 1024x718, components 3","md5":"88fe91815bc4ecf26c606cbbdaf9e774","sha1":"ab288fd40b2faf01da9b3816455e9334e748532e","sha256":"b8070414a86aacf5a1426746a1d3b334ae72c6041994302eaa79207ea81f11b4","sha512":"afde515603f239fb5982899cf65fea105900bd2d212c90cce1adb58f01226fe82bf402f6b1974fe98dee6af4daea9a7a4e3bca8e955437ee9904e4db215ed8cc","ssdeep":"3072:pwpNepZnFlV5+AyccFM0iMFKz1+CJHXiOPvEVDqMvRCOJMSw8W:pwpNepBx4AuFM0iMFK8KHXLPvEVD7ZC7","tlshash":"b6e31256ee968e91c0030c7f1ae34d2ec815dda2b95a5bebb12dce434b75cf021adb05","first_seen":"2025-12-20T07:06:13.903947Z","last_seen":"2026-03-28T22:56:40.213873Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1157,"receive":419,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/fbrfg/favicon.svg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:29.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon.svg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: W/\"50a6-646997282f5ce\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bPMGT%2BDR2yYFwSZnjLvf4i6duiTVd0zvUUX3uSfKt3rOtN30lQ34g%2BX5fa99So9962AqMlKObeFNKojjuTmRdGYlW%2FR4P1QFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0640884c410b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"332b5ee30e2cdad07fa6ec8f59009f7a","sha1":"4ee00c6d4e50cfefc9dd5652d3abf04c46ac9fa3","sha256":"bdfbdb96141f2ce962f5acf463d9ed0970f52bf7439fb1dd4dc20d21c37e23fc","sha512":"6c11258d1c2f02d69661464cc01f8d28c07a96a1f6a13f4408c78889bb6122ec8fefab389378d6924eec1815e3f1dda7edf2a4c8decceb6fda01a03d480f188a","ssdeep":"384:XvdmWMn/KCHOqsbLJC14ZYm00jJ9BdvAmnQo45/o27hjww7:XvdmZKCunJC14ZYW9dvnnQVoqhjZ","tlshash":"1192e13dc0f9778798220498f021e9dd693ca63ec9f4475a8ffe6428705b94b824696f","first_seen":"2025-11-14T01:45:12.663639Z","last_seen":"2026-07-22T17:35:50.082783Z","times_seen":9,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/ri-min.jpg","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ri-min.jpg HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48709\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"be45-6469972833836\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPwWJ6ZACGUTkG2CVIUVDXqy7kNrUDMmbH9u3NYIP7jTq6aA%2BIb%2BUs23lv2DeqvKfqvUmlU3luCdtoROoH6vL4IYh6GcF402cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b7b8e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1242x672, components 3","md5":"6548ce9e824859c65e83221ac4635a8a","sha1":"6a165ec1d8ec7dc25ab747aad4911bce21b3a49f","sha256":"48860cda7f2aab26246aaa87a1d4576e08016f6a424cf4271bb2169229424064","sha512":"aa5d3aaf151c835699703272e2dedd1c6e6e13f666ade2cf872a13337bae96e07f783565fbaedc18c6dd53a0bb16b535ea50ab4723099df964f8c1dc1783226b","ssdeep":"768:7ys7jA+TS32+WiiiiiCnoiDLYY8g7nKyCJVNa+O2QfwjZjyjYKDYVVVVVY4OQfCy:VnjGxkosqgTf6aL2QvYKDn4q+44xv","tlshash":"fa23df3e5e712760db44733ec2d19820745cedf09dae8429a261cbac6c1f3da98d8949","first_seen":"2025-12-20T07:06:13.857944Z","last_seen":"2026-03-28T22:56:40.233548Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab3-cc.ru/wp-content/uploads/2025/12/04.webp","fqdn":"krab3-cc.ru","domain":"krab3-cc.ru","tld":"ru"},"ip":{"addr":"172.67.151.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab3-cc.ru/","date":"2026-01-19T12:14:27.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab3-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 06:22:40 GMT","end":"Tue, 24 Mar 2026 07:22:35 GMT"},"fingerprint":{"sha1":"2D:A8:BD:DF:A7:6F:14:03:58:BB:9A:13:EF:95:B4:39:FA:27:F8:D4","sha256":"35:D7:6D:21:CB:81:9F:95:B4:90:06:C5:EE:30:82:9B:D0:1A:9F:36:03:82:59:54:11:72:CC:02:65:5E:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/04.webp HTTP/1.1\r\nHost: krab3-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab3-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 19 Jan 2026 12:14:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43240\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 07:25:25 GMT\r\netag: \"a8e8-6469972831126\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hW%2BFNtXIBioZ04m2K%2Bo2cMR7XuwbkX8Ul9pJ0hLGTK1XAcvReE%2BqwoglxghZw3W8SuUv6NwcVB46MV3n1gYemYJNsWm2fP9oaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c06407b8b980b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7e8ec39588537b10446a9599055712b","sha1":"e05e3af19adda5f193d61b273f53ea4ca1ebfe44","sha256":"2649e217ca4edaa0c64f310799f21291524657372f91aeb96626b69ccbf83d85","sha512":"eaa8ace97d7dc032c2ccc30ec47f21c3d8307a164dec2eb8fdbeed12e9157f20100a30b5fe1f60e7bdb566b0e6cb5cd2bb0922cac2155533d83bd8c63ff5d9c9","ssdeep":"768:+uYytYytYy3jgpNvSteS7BVgpvAe7GenKnUS50sK3Jkxm9u7eAFzDZXA:tJJaNateK2pvAiUBVKZp6f9A","tlshash":"3513e039df87b520edb2d638adf05f91d1a34205f233428976ac0f6177e21859aca14b","first_seen":"2025-12-20T07:06:13.883935Z","last_seen":"2026-07-16T16:04:13.35607Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"krab3-cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}