{"report_id":"8f91f9ff-b1d4-4705-9f3b-995f5163f9be","version":6,"status":"done","tags":[],"date":"2026-02-14T05:47:21Z","url":{"schema":"https","addr":"krab6cc-ru.net/","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"172.67.220.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krab6cc-ru.net/","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"title":"krab5.cc","dom":{"size":3109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e4fbcee4d65e3cfac63691c812a38ccf","sha1":"771bd277a6094af32b89ff58bf5c7027b6c6afea","sha256":"0f535c19538f882766ff57cbb5d6064b2196e76569f9423e075282d3ee7038ed","sha512":"fdb8be4f17d5d06d9505afec62ad1e9d7a64145da5615f1ca70860b69f0d4b3df364848114f497940b8a68fe12284344fe32e232e090201b347bdf1ca782a41e","ssdeep":"","tlshash":"6a5185d3e8f5649e10020172a9536e198cd0bc2f8bc2a785b3dd4ea74fd1bd9880762a","dom_hash":"domhashbc120133fbbebcd197fd4208345ba7a3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krab6cc-ru.net/","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"172.67.220.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:47:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"krab6cc-ru.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-13T17:35:39.520755Z","last_seen":"2026-02-13T17:35:39.520755Z","alert_count":7,"request_count":7,"received_data":136904,"sent_data":3051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab6cc-ru.net/","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfe0a241378044b73ad30843b2d6d637","sha1":"1fec3aa735d7805bc67ff138e56db34e3cda4d93","sha256":"e442c9c733cd1d02f00b3afc48fb1a1bd097247d849e61b4ab8c9a7c749319ae","sha512":"f3a414995d7a17b9b8a3c40e7dc86ef153a02f41bec6e95f7c8fa5ec4f6a86ebca9e081d62560c956904526a40011fc14e8d15a21bd49497329483577569fb46","ssdeep":"","tlshash":"f5c09b154d75c135466758973531d26565a02018f452f09546dddc5d2421fd54d46c5c","size":133,"data":"","first_seen":"2026-02-13T17:32:15.25165Z","last_seen":"2026-02-22T18:56:49.602385Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed116ee6be96bcc2b6c6df4f65abfac","sha1":"13f5e2db5972adbdf0238d59523df7b2e528adc8","sha256":"2c64e646b409e61a8959f8d4aacda308928e89930278e62f974c1308939a457e","sha512":"40f640b9f9e9aca593a5498d5ad0519c99e740bfc91f57877499f2a2a048af9fde9f4771deef17917838c6245fe6d228fea9283b8a8d25377eaffa0837a8d246","ssdeep":"","tlshash":"f2d01297b2a611a005951193fe830b4c285cd116ed03c68e22886951cd71b3ed17db85","size":279,"data":"","first_seen":"2026-02-13T17:32:15.252827Z","last_seen":"2026-02-22T18:56:49.60352Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/script.js?v=1771048020112","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"282e506526152fcd4d2eda8885d442e3","sha1":"1e3e52865d2dd0c31dfc4b5a96563acf45aa87a5","sha256":"720bd8764ede3f9e06ee8cc5731fc7267f6fb5c807b310330ec1cab44c27c7bc","sha512":"8b91521f4de045ec6ef767f361c04a91aa48d571446f4f5d623426dc4bf590b2d2f49a100b4aaca8dc4deeebfa8ccbc7021a7391821d1b4a55dc277a98bb6d4d","ssdeep":"","tlshash":"6211dc3316b25de9205574bb9d4ca64cb5bf00ff3d8f53212a680ea82db02b44368e99","size":888,"data":"","first_seen":"2026-02-13T17:32:15.250083Z","last_seen":"2026-02-22T18:56:49.595452Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab6cc-ru.net/","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:46:59.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:46:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Feb 2026 21:24:02 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZXvRFN4aDdeHU6qrNRVFhi%2B8Bj4ooWttsDryJSiPFOYTigWLNk5xRfz0b4ILmGYYm0KlqCQb4dIBwxgZej3JrJg7yF4K8zvFsk0Qmo9\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cda44ab9e60c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3077,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a0f26889e6e84d54f9afc04a09159a21","sha1":"cf7f4d26fcab9ec4a0241bbc4e2c2d400c6dde4e","sha256":"f58d65434492eaaea85120c8d1a1f44e8e2a5af434bfa63388776af1fa5e5036","sha512":"3df3f1f0dbea93371d047c76eca0d9cd793e72fcfc59069b9ab12e8cb227e2b326ee0614bf1de4b0b7f61354ced469388999975b6b74f8f85a94da2fa3a04d51","ssdeep":"","tlshash":"7f5185d3e4f1259e10020172ee536e158cd1bd2f8bc2a785b3dd4eb78fd1ad9884762a","first_seen":"2026-02-13T17:32:15.246037Z","last_seen":"2026-02-22T18:56:49.598897Z","times_seen":8,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":47,"dns":30,"connect":1,"send":0,"wait":61,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/css2","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab6cc-ru.net/","date":"2026-02-14T05:47:00.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Feb 2026 17:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6WvSfmMEESDBAEE8e2Icf9EOF%2BX%2Bw0tUKdTUDLgFSwJ87y09TviuPEL9eYhTNccNeMzGEvYJZm3Wv5CopMksQarVcfB3ZNyEKUNo9tT\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cda44ad2e66b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-07-26T01:53:16.275293Z","times_seen":7296,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/5.png","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab6cc-ru.net/","date":"2026-02-14T05:47:00.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET /5.png HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 10703\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 19:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"698b8cf6-29cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiEkQIaQ8P%2BtZ3BJPGGeY28%2FnnxjvC9ea2Aydn8R10IHFzPwi4QUdp2I8GubBfkMVFJYtr7qFn245ltyBzD1%2Fvpz78NCM5XFeRkZbY81\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda44ad2e71b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10703,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/14 23:14:50\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"4f05ca1121da273c532760ed96fbcbf3","sha1":"f347511b6d0603456191ef65e33c99f30e0fd8d7","sha256":"4fa6676ec9626c56faff6612b36af37f60f364a5cc2485e74da84b4ad2156f10","sha512":"2f37d053793b0ef40b7dd5c177dd085569626ce3d7938d1e3590c864fcb69d3fe90819fe60907b3994b3703dc5d48519236de62efb3032f3cc4385b58915c72c","ssdeep":"192:KSsyiF25Senrh4kXAG8JbVpZUMi8g5dRLJh2UPknl6Fu:KpyiTent46l8JB9Cd5Jh2UPyYFu","tlshash":"b522d00cf5ba6380cb6aec7686bdf633fad16db0fbd9444615db01af308c9060790586","first_seen":"2025-06-27T14:25:42.757693Z","last_seen":"2026-02-22T18:56:49.593757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/style.css","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab6cc-ru.net/","date":"2026-02-14T05:47:00.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 21:24:02 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ba1f2-755\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvBYaXGwYu52jMnwzRyzqdU7Rt3luohPlf6718y4M6Q5bsteGpx0azj1bhnaNkBnGtLfHgtscURW5HCMJNQTCqfq3kXxuipPmLJOzm5O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda44ad2e6bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"68218502c42292cc324abc99d101131e","sha1":"dab833d49fe946f888c2147593a9b290fe4f8921","sha256":"1bc57ce69e65b4cb8ee6508d568a428d59e008d1be5de9b64ad748d4f3d7d1a4","sha512":"dba8a24333b3d8c2fc3ce81887e74fdd663adfbf7519b840d2141339e712ae221840da22fcc72c0aacc7f0ee1244e51cd8e4055424f0056bbc3137af5612bf4e","ssdeep":"","tlshash":"9941aa922e9c0565b690d0bc79629746335e8173a30dcefd7ee4306ceeca3d085727a8","first_seen":"2026-02-13T17:32:15.24784Z","last_seen":"2026-02-22T18:56:49.592228Z","times_seen":8,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/script.js?v=1771048020112","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab6cc-ru.net/","date":"2026-02-14T05:47:00.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET /script.js?v=1771048020112 HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 19:54:31 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2Bur3SrryuQfAt26cI2T5qzMVFyPw9x6TKt48WC%2FTG15JF9O4RW5UblURzqAtaDY5SmV7FOabKiqgq40JfZJpUagCc8q%2BFo3Mdsffhch\"}]}\r\netag: W/\"698b8cf7-378\"\r\ncontent-encoding: br\r\ncf-ray: 9cda44adb812b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"282e506526152fcd4d2eda8885d442e3","sha1":"1e3e52865d2dd0c31dfc4b5a96563acf45aa87a5","sha256":"720bd8764ede3f9e06ee8cc5731fc7267f6fb5c807b310330ec1cab44c27c7bc","sha512":"8b91521f4de045ec6ef767f361c04a91aa48d571446f4f5d623426dc4bf590b2d2f49a100b4aaca8dc4deeebfa8ccbc7021a7391821d1b4a55dc277a98bb6d4d","ssdeep":"","tlshash":"6211dc3316b25de9205574bb9d4ca64cb5bf00ff3d8f53212a680ea82db02b44368e99","first_seen":"2026-02-13T17:32:15.250083Z","last_seen":"2026-02-22T18:56:49.595452Z","times_seen":8,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/4.png","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab6cc-ru.net/","date":"2026-02-14T05:47:00.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET /4.png HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 11281\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 19:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"698b8cf6-2c11\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8b7XYVX9%2BGWcKOxCkMhuM36uH9LXsNlnqt2CfgJTLkqJ2baal8qE0DLHu5ZzAPsAPXtU2AuqffVluQX%2BTOTw902ssuFatPF58m191aF5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda44ae1917b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11281,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/15 03:13:55\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"ead423c729a3863e1e143be5887ac5b0","sha1":"e45e9f1ef8890f159987ad684ab57c694ea31eaa","sha256":"352089d8c3a5edfd11fede61220478505131ea95b5d3b6da43988a034f42f796","sha512":"c7087cd414377c8f4873d06b50d52c98821c111600f7b0f7fe5e09583990bfe310767466905f7351cef1b068dccbb4515b01c614a68adce50e44ee235c95f2d8","ssdeep":"192:msysGy+dDNBY7mTK04dAP5/gBghSVaZGTpkYXcjTwF9:tyvdDzjYAP5/qgMVqGbXWa9","tlshash":"2432cf6acd06436010d15bb3fc16b24de7eeb683fa24b6c0b58701160f69c9a07cc66f","first_seen":"2026-02-14T05:47:21.976578Z","last_seen":"2026-02-14T05:47:21.976578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.net/favicon.ico","fqdn":"krab6cc-ru.net","domain":"krab6cc-ru.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab6cc-ru.net/","date":"2026-02-14T05:47:00.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:51:38 GMT","end":"Mon, 11 May 2026 17:48:42 GMT"},"fingerprint":{"sha1":"5C:BA:C3:C1:1C:26:38:E3:11:AA:29:CA:F3:AE:F0:2B:A7:DC:43:30","sha256":"88:21:F4:AE:86:63:38:BB:5D:D6:6C:43:17:F3:79:43:07:A1:4C:EB:9A:3B:F0:11:E9:C1:50:6B:21:41:50:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krab6cc-ru.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 19:54:30 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b8cf6-18c10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xR2csKY%2FdAT8nrUWLBJZFrgUu%2F7RezZ6D9iJTw1f4yPnj96Eu%2BGH4zte3fg%2B3VcMFpUCXr2zKPJgXfct3eTVWtET%2F7Pvzu%2F228e2Xjsy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda44ae08e3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}