{"report_id":"945fe1ed-91a5-4581-baea-b9e4789c3f31","version":6,"status":"done","tags":[],"date":"2026-01-27T12:50:39Z","url":{"schema":"http","addr":"krakenomni.com","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":0,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"final":{"url":{"schema":"https","addr":"krakenomni.com/login","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"title":"KrakenOmni - Unified Chat \u0026 Automation","dom":{"size":2515,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2067)","md5":"106cf00f6c31c77ed7a996f1e91630fd","sha1":"80ca75cf882422e8c84eff88c8e313e6debb3c97","sha256":"23cced99bf60af1a29cfb984dababfa7f777927b358e8c841843dfef3fc59416","sha512":"778555d8f2d99cb5d4ce2af0ce1f97a6704d23bcdbca1fd5a8201ee69b43afad12089b244e821ee97c0c7304856116cc17d70f0c3a8b563975df2c5775e6fb60","ssdeep":"","tlshash":"8c51552560e005eb9987c960bae1be107c8ec30bc677c498fafde1e95bd6c51cb06401","dom_hash":"domhash0493d1b7a880ec34bcaa5846de18f995","first_seen":"2026-01-27T11:11:49.877577Z","last_seen":"2026-01-27T12:50:42.375558Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakenomni.com","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":0,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T12:50:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"krakenomni.com","ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"domain_registered":"2026-01-25","domain_rank":0,"first_seen":"2026-01-27T11:11:45.635064Z","last_seen":"2026-01-27T11:11:45.635064Z","alert_count":20,"request_count":10,"received_data":3728434,"sent_data":4531,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakenomni.com/assets/index-CjTUR1f_.js","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"introduction_type":"scriptElement","is_inline":false,"md5":"b467fc07bedbb41502fd29730059b38a","sha1":"2052c29e59d5d1f09b959b05a57f1eccb1cf5828","sha256":"3dcbe6a71b431d6be5161da004cf94f1ccbeda2bc210b9a8cbdcac0907f635b9","sha512":"c0240b5c4a42ad13eba65ae7f53185787e20e34422ae194673ad9381bd9ad306951e9d7c7a92c4c7015223b509f3876a05ec4401e41687768ff130b4676b93a4","ssdeep":"24576:gLRhbwunJYnhVymoz4rJeHS+S81y5fA4kEF6se:gVhbwunSnhVyweHS+S81WfA4kEF6se","tlshash":"45656d94f182baadab6301e1147f1005b12d5f25ea3fc8a0f07ce8a525b444a7977fed","size":1423162,"data":"","first_seen":"2026-01-27T11:11:49.88271Z","last_seen":"2026-01-27T12:50:42.388092Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/assets/index-CjTUR1f_.js","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"introduction_type":"scriptElement","is_inline":false,"md5":"b467fc07bedbb41502fd29730059b38a","sha1":"2052c29e59d5d1f09b959b05a57f1eccb1cf5828","sha256":"3dcbe6a71b431d6be5161da004cf94f1ccbeda2bc210b9a8cbdcac0907f635b9","sha512":"c0240b5c4a42ad13eba65ae7f53185787e20e34422ae194673ad9381bd9ad306951e9d7c7a92c4c7015223b509f3876a05ec4401e41687768ff130b4676b93a4","ssdeep":"24576:gLRhbwunJYnhVymoz4rJeHS+S81y5fA4kEF6se:gVhbwunSnhVyweHS+S81WfA4kEF6se","tlshash":"45656d94f182baadab6301e1147f1005b12d5f25ea3fc8a0f07ce8a525b444a7977fed","size":1423162,"data":"","first_seen":"2026-01-27T11:11:49.88271Z","last_seen":"2026-01-27T12:50:42.388092Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krakenomni.com/kraken-logo.png","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenomni.com/login","date":"2026-01-27T12:50:20.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /kraken-logo.png HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 368532\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\netag: \"69781c00-59f94\"\r\nexpires: Wed, 27 Jan 2027 12:50:20 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":368532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"3a24d2824fc036112391f0eaa40eb7ff","sha1":"b8429c4e4e6f5ae86606cdd5d6fea99646b6b2e4","sha256":"1538e7135acde8f8694a05c973ecfa6f3e2d92ca643b3f531190c76d500c3d2a","sha512":"e06132c0d33118579ba38abbc05d125a5cacdf4dba56b028abfa85bbae04891a9a60ab5ee5f1291896544d5dc70e4be3b1c0b4ad7bfa654ff46ca10f622302a5","ssdeep":"6144:AG6FvAao/gFPq0E1wDwQ4ZmQkdJy4nW9KcASCdtRrWvJwOyOR8VKY:Z6FvigwH4QkdFnWrAfavJwLu6KY","tlshash":"c27423ec9bee79c7e65b6c8497008e07491adf49acf62e747203506a33d11789cf2e25","first_seen":"2026-01-27T11:11:49.878495Z","last_seen":"2026-06-14T00:23:46.046712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T12:50:17.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:17 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69781c00-1e8\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' https://krakenomni.com wss://krakenomni.com ws://krakenomni.com; frame-ancestors 'self';\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":488,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"05023c539258274b2f763ffc306ef64a","sha1":"c1d8dcc850aeb8b1948ab3d89a188c77b21b662f","sha256":"d9d882a7671527d0f2c41b93a3b8d165ddb1f4ad970266aff73ba50a3db7becc","sha512":"5078b19f2752ea522b65d50f3b73e1d5a4961b508befece1270cc0e827096a1dff723a4e2c72a8028e785d7c0392ef2419d46dc2ee89a71e5c125969ce6a5dfc","ssdeep":"","tlshash":"e5f09e4294d08915523003212ed1f4085e56d74bc799ad1825eb607c5f84b82cfdf578","first_seen":"2026-01-27T11:11:49.881577Z","last_seen":"2026-01-27T12:50:42.380478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":412,"dns":44,"connect":177,"send":0,"wait":177,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/assets/index-CjTUR1f_.js","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenomni.com/","date":"2026-01-27T12:50:18.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /assets/index-CjTUR1f_.js HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69781c00-15b73a\"\r\nexpires: Wed, 27 Jan 2027 12:50:18 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1423162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42251)","md5":"e266edada855f8830a918ee0f448155d","sha1":"d9f41498aa9ffb36cdaeb2413243abe6a28555ed","sha256":"80a978ac64cdc28175af2ee019e9f813ae4880ee11ffcaca9da937428f8809af","sha512":"8464aae468c4fc391c9140948f152d52f69b2613a9ca9dcc9bfcf93494c1b33d521bd24e7af6bb983882be0d59d11a56c4697a551c17f344dca1c9df2d63931e","ssdeep":"24576:gLRhbwunJYnhVymoz4rJeHS+S81y5fA4kp:gVhbwunSnhVyweHS+S81WfA4kp","tlshash":"96256ed872d6b56957a341e1007f0107f23d2d22781dc450f269ecea79b484aa1bbfbe","first_seen":"2026-01-27T11:11:49.87925Z","last_seen":"2026-01-27T12:50:42.382509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/kraken-logo.png","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenomni.com/","date":"2026-01-27T12:50:19.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /kraken-logo.png HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/dashboard\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T20:57:33.581028Z","times_seen":17843402,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/assets/index-BXOHVJaV.css","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenomni.com/","date":"2026-01-27T12:50:18.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /assets/index-BXOHVJaV.css HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69781c00-1128d\"\r\nexpires: Wed, 27 Jan 2027 12:50:18 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70285,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9b7dabfb648c9f5014331a81b8dbf7aa","sha1":"f3ffefb8177c79afc5091500d38c96d85add7241","sha256":"c29eeb5e7261137ef16e945fddc6455483adc6aeef8dafebedab485c75e3c57f","sha512":"1d5c314804152bd491bf0873f1fab80caa1c88cd93ce370a3d9fb4f6e1f479ab445f73c2b4a6798c14a8a1a1ea2d13701e5d2bae487c5b1dedcd2e5e03090c39","ssdeep":"384:kwaXFhgT730gfQFmUoPjkrVp6kGFzcN3aYyN0X/hrQowYJZjeV1XlXvpYYWV7ma:8XFhe730gfQFmUD/6vWrTwYTeV1XlSYI","tlshash":"f363432c6694443b3d5340f9ea9de56df31bb1c0cf292aeaf892622167d23f75c97600","first_seen":"2026-01-27T11:11:49.880059Z","last_seen":"2026-01-27T12:50:42.385796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/login","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T12:50:19.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/dashboard\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69781c00-1e8\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' https://krakenomni.com wss://krakenomni.com ws://krakenomni.com; frame-ancestors 'self';\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":488,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"05023c539258274b2f763ffc306ef64a","sha1":"c1d8dcc850aeb8b1948ab3d89a188c77b21b662f","sha256":"d9d882a7671527d0f2c41b93a3b8d165ddb1f4ad970266aff73ba50a3db7becc","sha512":"5078b19f2752ea522b65d50f3b73e1d5a4961b508befece1270cc0e827096a1dff723a4e2c72a8028e785d7c0392ef2419d46dc2ee89a71e5c125969ce6a5dfc","ssdeep":"","tlshash":"e5f09e4294d08915523003212ed1f4085e56d74bc799ad1825eb607c5f84b82cfdf578","first_seen":"2026-01-27T11:11:49.881577Z","last_seen":"2026-01-27T12:50:42.380478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/assets/index-BXOHVJaV.css","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenomni.com/login","date":"2026-01-27T12:50:20.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /assets/index-BXOHVJaV.css HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69781c00-1128d\"\r\nexpires: Wed, 27 Jan 2027 12:50:20 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70285,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9b7dabfb648c9f5014331a81b8dbf7aa","sha1":"f3ffefb8177c79afc5091500d38c96d85add7241","sha256":"c29eeb5e7261137ef16e945fddc6455483adc6aeef8dafebedab485c75e3c57f","sha512":"1d5c314804152bd491bf0873f1fab80caa1c88cd93ce370a3d9fb4f6e1f479ab445f73c2b4a6798c14a8a1a1ea2d13701e5d2bae487c5b1dedcd2e5e03090c39","ssdeep":"384:kwaXFhgT730gfQFmUoPjkrVp6kGFzcN3aYyN0X/hrQowYJZjeV1XlXvpYYWV7ma:8XFhe730gfQFmUD/6vWrTwYTeV1XlSYI","tlshash":"f363432c6694443b3d5340f9ea9de56df31bb1c0cf292aeaf892622167d23f75c97600","first_seen":"2026-01-27T11:11:49.880059Z","last_seen":"2026-01-27T12:50:42.385796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/assets/index-CjTUR1f_.js","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenomni.com/login","date":"2026-01-27T12:50:20.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /assets/index-CjTUR1f_.js HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69781c00-15b73a\"\r\nexpires: Wed, 27 Jan 2027 12:50:20 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1423162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42251)","md5":"e266edada855f8830a918ee0f448155d","sha1":"d9f41498aa9ffb36cdaeb2413243abe6a28555ed","sha256":"80a978ac64cdc28175af2ee019e9f813ae4880ee11ffcaca9da937428f8809af","sha512":"8464aae468c4fc391c9140948f152d52f69b2613a9ca9dcc9bfcf93494c1b33d521bd24e7af6bb983882be0d59d11a56c4697a551c17f344dca1c9df2d63931e","ssdeep":"24576:gLRhbwunJYnhVymoz4rJeHS+S81y5fA4kp:gVhbwunSnhVyweHS+S81WfA4kp","tlshash":"96256ed872d6b56957a341e1007f0107f23d2d22781dc450f269ecea79b484aa1bbfbe","first_seen":"2026-01-27T11:11:49.87925Z","last_seen":"2026-01-27T12:50:42.382509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/kraken-logo.png","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenomni.com/login","date":"2026-01-27T12:50:20.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /kraken-logo.png HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T20:57:33.581028Z","times_seen":17843402,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenomni.com/kraken-logo.png","fqdn":"krakenomni.com","domain":"krakenomni.com","tld":"com"},"ip":{"addr":"189.173.235.154","port":443,"asn":8151,"as":"UNINET","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenomni.com/login","date":"2026-01-27T12:50:20.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenomni.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:51:15 GMT","end":"Sat, 25 Apr 2026 20:51:14 GMT"},"fingerprint":{"sha1":"0A:6E:7A:2D:7A:17:3F:BE:64:E8:90:80:F8:51:E5:94:D5:CD:9A:CA","sha256":"03:B1:A3:2C:69:92:C3:D2:8A:43:B6:B6:FA:48:29:BE:99:B7:68:C4:5A:DF:FF:3F:62:05:4B:9E:A3:52:2F:1A"}}},"request":{"raw":"GET /kraken-logo.png HTTP/1.1\r\nHost: krakenomni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakenomni.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Tue, 27 Jan 2026 12:50:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 368532\r\nlast-modified: Tue, 27 Jan 2026 01:59:28 GMT\r\netag: \"69781c00-59f94\"\r\nexpires: Wed, 27 Jan 2027 12:50:20 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":368532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"3a24d2824fc036112391f0eaa40eb7ff","sha1":"b8429c4e4e6f5ae86606cdd5d6fea99646b6b2e4","sha256":"1538e7135acde8f8694a05c973ecfa6f3e2d92ca643b3f531190c76d500c3d2a","sha512":"e06132c0d33118579ba38abbc05d125a5cacdf4dba56b028abfa85bbae04891a9a60ab5ee5f1291896544d5dc70e4be3b1c0b4ad7bfa654ff46ca10f622302a5","ssdeep":"6144:AG6FvAao/gFPq0E1wDwQ4ZmQkdJy4nW9KcASCdtRrWvJwOyOR8VKY:Z6FvigwH4QkdFnWrAfavJwLu6KY","tlshash":"c27423ec9bee79c7e65b6c8497008e07491adf49acf62e747203506a33d11789cf2e25","first_seen":"2026-01-27T11:11:49.878495Z","last_seen":"2026-06-14T00:23:46.046712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"krakenomni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}