{"report_id":"95a3774d-b902-4879-8e4e-2f76d4e60670","version":6,"status":"done","tags":[],"date":"2026-02-14T05:47:21Z","url":{"schema":"https","addr":"krab6cc-ru.com/","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krab6cc-ru.com/","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"title":"krab5.cc","dom":{"size":3109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a82f12b6473829df2754e82ed3f9be84","sha1":"fc0be007aa50b8cf1adb210ac54c565dc7ba9bfb","sha256":"ed66405b87db6f7fd074380bb4008d8913c2e287cfafcab0c6317b0fbd82b5aa","sha512":"0f35fc0b7c98b6e981b7cf8dac99c672ceb134e9a242425ecf0d15b8f1ad439c63c73e2028507f50ebbaacd1e5cd4372aa09bf3c7fb12c963fb23a3d6a169540","ssdeep":"","tlshash":"795186d3e4f5659e10020172ad536e158cd0bc2f87c29785b3dd4ea74fd1bd9880761a","dom_hash":"domhashbc120133fbbebcd197fd4208345ba7a3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krab6cc-ru.com/","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:47:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"krab6cc-ru.com","ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-13T17:32:07.613029Z","last_seen":"2026-02-13T17:32:07.613029Z","alert_count":7,"request_count":7,"received_data":136916,"sent_data":3051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab6cc-ru.com/","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfe0a241378044b73ad30843b2d6d637","sha1":"1fec3aa735d7805bc67ff138e56db34e3cda4d93","sha256":"e442c9c733cd1d02f00b3afc48fb1a1bd097247d849e61b4ab8c9a7c749319ae","sha512":"f3a414995d7a17b9b8a3c40e7dc86ef153a02f41bec6e95f7c8fa5ec4f6a86ebca9e081d62560c956904526a40011fc14e8d15a21bd49497329483577569fb46","ssdeep":"","tlshash":"f5c09b154d75c135466758973531d26565a02018f452f09546dddc5d2421fd54d46c5c","size":133,"data":"","first_seen":"2026-02-13T17:32:15.25165Z","last_seen":"2026-02-22T18:56:49.602385Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/script.js?v=1771048020102","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"282e506526152fcd4d2eda8885d442e3","sha1":"1e3e52865d2dd0c31dfc4b5a96563acf45aa87a5","sha256":"720bd8764ede3f9e06ee8cc5731fc7267f6fb5c807b310330ec1cab44c27c7bc","sha512":"8b91521f4de045ec6ef767f361c04a91aa48d571446f4f5d623426dc4bf590b2d2f49a100b4aaca8dc4deeebfa8ccbc7021a7391821d1b4a55dc277a98bb6d4d","ssdeep":"","tlshash":"6211dc3316b25de9205574bb9d4ca64cb5bf00ff3d8f53212a680ea82db02b44368e99","size":888,"data":"","first_seen":"2026-02-13T17:32:15.250083Z","last_seen":"2026-02-22T18:56:49.595452Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed116ee6be96bcc2b6c6df4f65abfac","sha1":"13f5e2db5972adbdf0238d59523df7b2e528adc8","sha256":"2c64e646b409e61a8959f8d4aacda308928e89930278e62f974c1308939a457e","sha512":"40f640b9f9e9aca593a5498d5ad0519c99e740bfc91f57877499f2a2a048af9fde9f4771deef17917838c6245fe6d228fea9283b8a8d25377eaffa0837a8d246","ssdeep":"","tlshash":"f2d01297b2a611a005951193fe830b4c285cd116ed03c68e22886951cd71b3ed17db85","size":279,"data":"","first_seen":"2026-02-13T17:32:15.252827Z","last_seen":"2026-02-22T18:56:49.60352Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab6cc-ru.com/5.png","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab6cc-ru.com/","date":"2026-02-14T05:47:00.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET /5.png HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 10703\r\nlast-modified: Tue, 10 Feb 2026 19:54:12 GMT\r\npriority: u=4,i=?0\r\netag: \"698b8ce4-29cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5mSPGdCRJ6oeF8fh7HY57FWGn%2BKW4AQO1kqFpoETXauU2U7bU53eVY9OKI7WxQvjWLyt4Igx%2BtwXhQtWh13ywRrBU9%2BQ6fzLE8b%2BrHF%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda44ad2938c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10703,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/14 23:14:50\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"4f05ca1121da273c532760ed96fbcbf3","sha1":"f347511b6d0603456191ef65e33c99f30e0fd8d7","sha256":"4fa6676ec9626c56faff6612b36af37f60f364a5cc2485e74da84b4ad2156f10","sha512":"2f37d053793b0ef40b7dd5c177dd085569626ce3d7938d1e3590c864fcb69d3fe90819fe60907b3994b3703dc5d48519236de62efb3032f3cc4385b58915c72c","ssdeep":"192:KSsyiF25Senrh4kXAG8JbVpZUMi8g5dRLJh2UPknl6Fu:KpyiTent46l8JB9Cd5Jh2UPyYFu","tlshash":"b522d00cf5ba6380cb6aec7686bdf633fad16db0fbd9444615db01af308c9060790586","first_seen":"2025-06-27T14:25:42.757693Z","last_seen":"2026-02-22T18:56:49.593757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/script.js?v=1771048020102","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab6cc-ru.com/","date":"2026-02-14T05:47:00.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET /script.js?v=1771048020102 HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzbBrkLovztdvLF3WU6EG6brz05x4beHcXR0mt9k5SVagFaFBf6xEU3kFC77kRQ%2B7MgRoHfqQdWKMF0bOp7vg91UnZxmh9s2uC%2FpLtJs\"}]}\r\nlast-modified: Tue, 10 Feb 2026 19:54:13 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"698b8ce5-378\"\r\ncf-ray: 9cda44ada963c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"282e506526152fcd4d2eda8885d442e3","sha1":"1e3e52865d2dd0c31dfc4b5a96563acf45aa87a5","sha256":"720bd8764ede3f9e06ee8cc5731fc7267f6fb5c807b310330ec1cab44c27c7bc","sha512":"8b91521f4de045ec6ef767f361c04a91aa48d571446f4f5d623426dc4bf590b2d2f49a100b4aaca8dc4deeebfa8ccbc7021a7391821d1b4a55dc277a98bb6d4d","ssdeep":"","tlshash":"6211dc3316b25de9205574bb9d4ca64cb5bf00ff3d8f53212a680ea82db02b44368e99","first_seen":"2026-02-13T17:32:15.250083Z","last_seen":"2026-02-22T18:56:49.595452Z","times_seen":8,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/favicon.ico","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab6cc-ru.com/","date":"2026-02-14T05:47:00.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 10 Feb 2026 19:54:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698b8ce5-18c10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXa%2B38uU9M2LR6SNEYjybd3LXBi%2FFS8IwO%2Bahhoc7%2BfOw0SDCCGF2tMADBcy2stGkq1gcBW8gpKZeDGOTvzogr9u1fcPcD8qX48JnAM%2B\"}]}\r\ncf-ray: 9cda44ae2974c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/2.png","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab6cc-ru.com/","date":"2026-02-14T05:47:00.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET /2.png HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 11277\r\nlast-modified: Tue, 10 Feb 2026 19:54:11 GMT\r\npriority: u=4,i=?0\r\netag: \"698b8ce3-2c0d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oazjt0ZFU%2FRxoH3DORLrLBv3VNKT3on7Xpy7y9QjBsxT00xyKmFdq1Gcu%2B9TrWRx3KghwsexLdLqJFh3wTR55TsjcUGESOFnxOPG8SgV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cda44ae697ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11277,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/14 22:23:26\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"19646020bad711b2f00b3ce6483d4572","sha1":"2e3a0c8af5a3547dc5bb00b31189064ece8c7bcd","sha256":"47d275a8beea760e854a7dc4ee132165cbf4d51b102e25641804ceb8de88195a","sha512":"61edcb7cec8c25141a93c1400073370b99607dc6e2adb9343badb4bb3e5f094aa4d663974e9ebe30fbc809235be095efc8023c44d42623b48abb9fec0ac0349c","ssdeep":"192:1sy6wkgxdbGw8Qkpba9qTheAQkmHe4DI+4+hqe0YKrO9sGxlmhpQowXhEC:Oy/HbGLQkNTheAjOtI+NhqVrO9O+REC","tlshash":"5b32bfc8e005cb05a933e6f6dba53e68a1d0f31fede148dfb1bbc2d56624951a15022e","first_seen":"2025-07-21T20:40:01.635658Z","last_seen":"2026-02-22T15:33:47.298028Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:46:59.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:46:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Feb 2026 21:23:49 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiVB0I7Vlao7zVhsq5jty2g66co%2FxlwJpKiFOA6lkS%2F6YZELmUZXaDIt%2Fev0T6IYqbhDPy1yX3C8KQFjvi3FHGZHyCTBQdS5d%2Bdl4M%2B7\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cda44ab9b1732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3077,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a0f26889e6e84d54f9afc04a09159a21","sha1":"cf7f4d26fcab9ec4a0241bbc4e2c2d400c6dde4e","sha256":"f58d65434492eaaea85120c8d1a1f44e8e2a5af434bfa63388776af1fa5e5036","sha512":"3df3f1f0dbea93371d047c76eca0d9cd793e72fcfc59069b9ab12e8cb227e2b326ee0614bf1de4b0b7f61354ced469388999975b6b74f8f85a94da2fa3a04d51","ssdeep":"","tlshash":"7f5185d3e4f1259e10020172ee536e158cd1bd2f8bc2a785b3dd4eb78fd1ad9884762a","first_seen":"2026-02-13T17:32:15.246037Z","last_seen":"2026-02-22T18:56:49.598897Z","times_seen":8,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":54,"dns":40,"connect":1,"send":0,"wait":63,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/css2","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab6cc-ru.com/","date":"2026-02-14T05:47:00.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMxcsCnamKkw2Kwad%2FUjrvAQYkjA1i%2F%2FDjoIiILTticxfoImaJ2rorkx6375uMSkPAQef0TrBJDVLvcVcDxwAsRUJ15eL1kjhD8nrSKm\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Feb 2026 17:05:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cda44ad2936c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-07-26T21:52:49.019056Z","times_seen":7298,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab6cc-ru.com/style.css","fqdn":"krab6cc-ru.com","domain":"krab6cc-ru.com","tld":"com"},"ip":{"addr":"172.67.191.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab6cc-ru.com/","date":"2026-02-14T05:47:00.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab6cc-ru.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:47:23 GMT","end":"Mon, 11 May 2026 17:45:45 GMT"},"fingerprint":{"sha1":"96:D8:54:83:4C:75:11:02:E5:E4:C7:17:90:A1:4B:D8:A6:3F:8C:B8","sha256":"39:AD:11:F9:90:0B:7C:C9:85:08:9E:9E:FE:AF:47:4E:D0:D6:71:94:02:5A:95:71:7F:F1:15:C5:89:2C:F2:80"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: krab6cc-ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab6cc-ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:47:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 21:23:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ba1e5-755\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXPf4755evkz04w%2BCEZQ7EvRmGjnIhL%2BC8d90kMvpOJT2nAsJR3HJxYpSKy9J3NLtsK7JROBab3qtvvTNx2IIJ4nQSHQ7qAhgvXYjrMq\"}]}\r\ncf-ray: 9cda44ad2937c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"68218502c42292cc324abc99d101131e","sha1":"dab833d49fe946f888c2147593a9b290fe4f8921","sha256":"1bc57ce69e65b4cb8ee6508d568a428d59e008d1be5de9b64ad748d4f3d7d1a4","sha512":"dba8a24333b3d8c2fc3ce81887e74fdd663adfbf7519b840d2141339e712ae221840da22fcc72c0aacc7f0ee1244e51cd8e4055424f0056bbc3137af5612bf4e","ssdeep":"","tlshash":"9941aa922e9c0565b690d0bc79629746335e8173a30dcefd7ee4306ceeca3d085727a8","first_seen":"2026-02-13T17:32:15.24784Z","last_seen":"2026-02-22T18:56:49.592228Z","times_seen":8,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"krab6cc-ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}