{"report_id":"9769b45f-661d-472d-9074-939fb327dbb4","version":0,"status":"done","tags":[],"date":"2026-09-25T05:48:03Z","url":{"schema":"http","addr":"krakenx.top/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"172.67.136.92","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"title":"CoinEx","dom":{"size":22404,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15919)","md5":"458c1a543f0b633fd1a938c466065b7b","sha1":"816a260f0e8bbb4a754c2c60bf7284d12054e110","sha256":"7b28773b8613894bf8dcec423d896c3ee7e83cdb8ad62b1570bb9a6d6141adca","sha512":"bf2f9411f65bb4aa861918f5b873c15aa9e01bb0512a577fbf0b315605d4166c1c92e36d9486554780733dc54ec4ad541a3b1361ea125bafc74adf2fe7d1034e","ssdeep":"384:sWdZCxD2WpdnRhmFmFSF+FyFSFOkFTFLaq+3YK3I:sSQxD2WSy26W2OMJLaL3YK3I","tlshash":"c9a2ee61b501d4a312f386d4d9a2bf59b3f2f30fc41ac948badc42924fc3db4ba559a1","dom_hash":"domhash4420259592d2647f4a09588241a409a9","first_seen":"2026-09-25T05:48:30.566177Z","last_seen":"2026-09-25T05:48:30.566177Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakenx.top/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"172.67.136.92","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:48:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-09-22T21:15:37.022332Z","last_seen":"2026-09-22T21:15:37.022332Z","alert_count":0,"request_count":21,"received_data":144168,"sent_data":12141,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"krakenx.top","ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":2691598,"sent_data":12659,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.gewk.top","ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-09-18","domain_rank":0,"first_seen":"2026-09-22T21:18:45.444985Z","last_seen":"2026-09-22T21:18:48.039772Z","alert_count":18,"request_count":7,"received_data":3163,"sent_data":3811,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-25T06:08:28.983892Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21738b5e0f5c65b6c7c7629b894fda1a","sha1":"953e5f38a32d3dfba6889cf2628473f02ee2a133","sha256":"8444b60d4c9ba298b0d231ac5f88fb4b6ddf792dffec974e73ffab3cf4e891ca","sha512":"badcd90261fac837fc4e50079498d9cba45edc18a29c34a221174a835faa92fa3ea76dd0080f7071974f2d8850c29eb8984b40c4b6f5ae0521b034b449d8ba59","ssdeep":"","tlshash":"88e0abb63279c030548586291dfc1827f2a7a6724d9c0e2eb0c0ea095e4dd2820b8092","size":408,"data":"","first_seen":"2026-03-23T14:50:53.629157Z","last_seen":"2026-09-25T06:06:57.12567Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-1a2e0624.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f42418797a8b4ce9baf4d9b2eaebc823","sha1":"0c8d96e40884ad8c3996b5aefef5335b3d75699a","sha256":"34f4f145fe80aafccfc0d3f497478624d1e5e81e0dfe8757cbe77f781336ec45","sha512":"53c91811dc9160656bf8a2959364c14e6127b4a17926c47fb626d1602a6d283a01793ca583261a08b50b0f99cf75936770dbfdabe6519f2634a1ef7f68762060","ssdeep":"","tlshash":"8101bdf8fd0d8ebb0ea20a4141a13601140a1fddfa1419e198867d661be4950d7de72d","size":776,"data":"","first_seen":"2026-09-22T21:15:44.34796Z","last_seen":"2026-09-25T06:06:57.082725Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/en-1878cc81.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d67e72876cf3806019ea62cae35c016a","sha1":"90c5d37d0d737e4b081cf805ce58f2d9681a3cf9","sha256":"5ca356f2f09cb0241e71488d06f0752a9d0858d1793de285f56ee5cdc4848ffb","sha512":"e1677fd5141be147981b2a2388b7595df9392d43408149fe7bf39e495cd9d392bb9a99aa7fb179410fc1b211f3d10d3ae5541d3458accfbc02c7e5fb602dd109","ssdeep":"768:+nLctZcEw/o7ruOdAFsifnAMC2rAaAKFVoP6+6sPG9w1mwO6fpk7aOLxO:mL1ponuOdebE2r7FVLsPWwqLxO","tlshash":"d203e7893e1a989a05f3537674ce6e1120f60ac18256881f4fedc9fd53d2b676363b34","size":41190,"data":"","first_seen":"2026-09-22T21:15:44.336518Z","last_seen":"2026-09-25T06:06:57.09164Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-25T06:08:28.975985Z","times_seen":6494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-25T06:08:28.980371Z","times_seen":1989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-ad607526.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4ace07668ed4ec31f3eff870c4c1d52","sha1":"6d20fd614e735c7a3c62f300addeaf0549dfe91c","sha256":"d5c00268e78c2404f6504eeb8a72ec6c9afc886e00c7b88735e67e836f5fc9a6","sha512":"56f540b3f2dd65f425866efb55e8902d6da8de7227bb5a8037a6351327e85c2301f21239bc137c4d9a522fa9b6d60a76a0ddf0bf398e4dbc7a1b0c3aee11acba","ssdeep":"","tlshash":"77e0f10f2a59c6f32ba38cfce1330811e20426040300d1c0e1030a04a2780e3a05f378","size":388,"data":"","first_seen":"2026-09-25T05:48:30.602021Z","last_seen":"2026-09-25T06:06:57.095004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-25T10:47:04.93418Z","times_seen":15411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-aa1865bc.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e217a1bfeeeefb54b7daeaedf44551","sha1":"c46e36007911bb294aa2beb863d5eaba2317a99f","sha256":"d1e5e1eec3ea6e6a5565807cf55dccea55c8cae588d38426684d0405ba6974d7","sha512":"34288661f5b1ca819337d4bb4eea524014f6f130bb713531cb1bb94cd4db6a1ce1b9343d159323cc0faf9e05349810062b2905ed9fc4fa3ee4b26076e83e8b65","ssdeep":"96:qgq+CY/9Y6qD+wSXNrFqPyAtb6airIP+jn3hv+e3XfWarejt:8+CYFY6qiwS9YqAtb3qZ3hv1Xu/t","tlshash":"c7a1c899f80286beb9671440489c0010319cbbffb10948f1fbfead0ab7b4979d364766","size":4663,"data":"","first_seen":"2026-09-25T05:48:30.585016Z","last_seen":"2026-09-25T06:06:57.095836Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-00e1f855.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6efac5738239e291af9848fe82de1ea9","sha1":"e3484bb4070467facca257e76f010f67ee3817b9","sha256":"49b6428abfc18c42551119b23117a7d452dd06efb60fe3648580a64df150bb5b","sha512":"5cd128474116bd2cba5b9f955e631f5b413fdcd9faf37a2f94d79d62aa73963a7b2bcb2d53cca472e52da7f60de34f35413bd762c19d619f2e6f4f69db2defd9","ssdeep":"384:LkKzqBT7hRf0xuF0FtAfU2w6KImMuEFuZ36kXMMzprhQhdCUSD:L9CsUKtAfUnwbAprhQhdCUA","tlshash":"b852e865f902993df6ffa05140980050b66a7ffb411a49e1b9bc6d4f7342eb8f389708","size":14022,"data":"","first_seen":"2026-09-25T05:48:30.592899Z","last_seen":"2026-09-25T06:06:57.110121Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/filters-ae804622.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f262da30d52f5b073b1f011234682048","sha1":"0e6bcde2207d21919ee719c5d55568515eb53181","sha256":"789b6b67b67d09a7db3850def35ed79424b9793d3772b55a491869e4ce6b7adc","sha512":"628d5efc4a553c9012b937de9453d6569bb49d89493c3c7d2eeb346c05048734067cf6a75e643e8553dbbe1d9158037550352a3d130ab2bd8d70e71057a21b8e","ssdeep":"","tlshash":"5d5135fdfdd7613356ea6ef940288514b28ebe20686e0a4df54bd0455933888e0bf778","size":3102,"data":"","first_seen":"2026-09-25T05:48:30.569336Z","last_seen":"2026-09-25T06:06:57.096716Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-25T06:08:28.98105Z","times_seen":10430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"df55055f75e2187c0c3ffd3298e162c2","sha1":"dc0db5a52df96c5c7636f6c0aef602a6ff8d0042","sha256":"34d238e0facf0645b79ceb771e2969c69c252c99e63f22e7fcd3dcfc6d7ba0ff","sha512":"e903ff7edc9a3fe9051dacfd58d309f38e5f7689fa9749821e071171fee8dded977be371a8cfafd49c12a8e2501483f77fa64b0e732c827d0b5c0cca892cd137","ssdeep":"","tlshash":"4fc08cc4a0c33e102656641054bf25e490244027b0481b468cf4d8493e630b08233e98","size":144,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-25T06:06:57.141447Z","times_seen":6036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f049705ded586ec888809453ddb97eed","sha1":"c04197dd58fab49f9d3974f390695d56e388a792","sha256":"3b2046fc0d9b54e8f978fcbe69edf1eb43f35320283ed2e39b12c20deafe4f45","sha512":"9f33bd944891eeddb142780f0236713298022b151db1db846f52e53f4399bfdf96834a0a86908aa80ba71c1a60b8e717df28c7c85ab59dc7b3734f4757e02849","ssdeep":"","tlshash":"f4c08cd4b0ca6d00a603691011af35e49024806770482b029ca4dc882f234b09237e98","size":147,"data":"","first_seen":"2024-12-02T08:41:53.640766Z","last_seen":"2026-09-25T06:06:57.129212Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-09-25T06:06:57.134844Z","times_seen":6466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-09-25T06:06:57.124855Z","times_seen":6396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/charting_library/charting_library.min.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-25T06:08:28.944982Z","times_seen":1496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-09-25T06:06:57.138159Z","times_seen":7263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-25T06:08:28.984623Z","times_seen":543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-25T06:08:28.973542Z","times_seen":7603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-40ed767e.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df6b19a0ef479442f8a29a8c8a86c669","sha1":"57c86a6f22b1f13de8ea1bd66b6e7029933648d9","sha256":"74afc699c688e4ca97b726a91d109b6bf22de14d2a6c3ed2e8ab359e08408fa6","sha512":"52a76babefc86d7efe2d4074ccf81f47fb4a254a86d7deb0bfd59c4d4acf3dcde34ec547e45a6880f6e0ba12ed4640ba73a3601a289f5cfb86595fb192f8c37e","ssdeep":"1536:mOmmlOZh+0JM/FZBTy0A+N0NpFGDaWHrp+sa57:mt/OE0As+7","tlshash":"e4a35c8d950b1fbf58fd0885a55b4a0020ad1fd35988ccd3b3ba6e4537fac94639a72c","size":104328,"data":"","first_seen":"2026-09-25T05:48:30.597405Z","last_seen":"2026-09-25T06:06:57.104985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/vendor-eb205ae6.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02759b80e530bee3460c1747943c3e95","sha1":"d3151627784736dd9999a98f06bfcb2ab9f9561e","sha256":"70803b0026cbaee22493f49c638d3b795bfdedd46a91eb6a618bbd3f63c51298","sha512":"c46767425509f567a6548f782c6c09772b7ec20692d5c997eed0c7a834174d98dfaae0d0d9f3ced483c640869f2a9948edfb1d333feb91ef29d59752ca727b74","ssdeep":"12288:MWVxNiVrzNfnGMEAaFujpEgjWR8tSkHpcE13WYdWzoE0KEXYcba2VW:MWVHiVRntEbFsEetSkHOzYdWzoEYa2I","tlshash":"291529c97292f06147ab24e240bb0006f3396e59744e8494f1add8db7d6ad89e277f3c","size":879097,"data":"","first_seen":"2026-09-22T21:15:44.325781Z","last_seen":"2026-09-25T06:06:57.106055Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/currencyItem-968544c0.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fcbb4d1cbafdb375a4e6515ff770638","sha1":"2eaf879a33d768ebc988a8c1c87e33ca8ab1023a","sha256":"5e4a807661ea6ad18e220cb798e905f1107f17ff385dfc5e9bda982295ff14d3","sha512":"2937f8958d2381009ebecc49f20dcdc1f85f936d78e29d7dccbd7ec149d0f75456232cecee59432ae80332d28a230116609d33b4ba76b91ca94107c7dbb7c282","ssdeep":"","tlshash":"cf31bc59aa01cbb5c7be9162c1b80415535dbfdb70064682faea244a3bc75fce324a31","size":1643,"data":"","first_seen":"2026-09-25T05:48:30.570818Z","last_seen":"2026-09-25T06:06:57.117281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-25T06:06:57.131385Z","times_seen":3821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-25T06:08:28.972407Z","times_seen":1124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-25T06:08:28.976578Z","times_seen":6279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-25T06:08:28.979828Z","times_seen":8051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"adac559c51ccb572d3d59d05c31b5bfd","sha1":"8b0eff0a0b73de4ade6e82688cbd7be31787e293","sha256":"96e1a94de98e376017745656a5d26d52fcfe59726335be099a332ec52237bf17","sha512":"fc46b460d879f8ccdc3fae42fd5a9173967aaa1a5e3a5eb801ae745da6a7c40c3838536a87331923dc509f0c9c336845bda3d0206200635fee20c32be0f3f5c6","ssdeep":"","tlshash":"6511abfe291a602d6303404f976b7801643290a9001a184173cc9b9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-09-25T05:48:30.614917Z","last_seen":"2026-09-25T06:06:57.122766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-25T11:26:28.01449Z","times_seen":49015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-25T11:26:28.015044Z","times_seen":50314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-25T06:08:28.974811Z","times_seen":7574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-09-25T06:08:28.978653Z","times_seen":912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-25T06:06:57.136866Z","times_seen":7031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-25T06:06:57.139605Z","times_seen":427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-25T06:08:28.979161Z","times_seen":1138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-09-25T06:06:57.132588Z","times_seen":7677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-25T06:08:28.978102Z","times_seen":7279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/#/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-09-25T06:06:57.137508Z","times_seen":6951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/pay.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.337Z","timestamp":1790315253337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/pay.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ0ZYXH0MK95PY8\r\nx-amz-id-2: JbO1NtuEbhNVOD2En5RgDRuKB0vLSt6+RbKiPXExhrJItWUHN45I8Eex0eQhXZQ8ziD97pm+DPQ=\r\nContent-Length: 558\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:18:54 GMT\r\nETag: \"010ddd08335b1188036f42d59850b617\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":558,"size_decoded":992,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"010ddd08335b1188036f42d59850b617","sha1":"98e3e00867854809d47f0129b4dcfcfb6b5156da","sha256":"751027a64be19ef70ce88ec80db21e3a67e4a8e40e237480ed06c1f254d9c180","sha512":"96e52c0a90eb24a1eec9812726fe5e600914180babea82e6374b99aacba46482bf3de43c693a5bba6abab189f30f745d2c8a12a94f64110dc940830aaf27b4ad","ssdeep":"","tlshash":"1df0209b356afe91d8360af298e34b5508c272a48203773e621ce435a76610ea8846e3","first_seen":"2026-09-22T21:15:44.349362Z","last_seen":"2026-09-25T06:06:57.077881Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1631,"timings":{"blocked":1347,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/platform/dev/config.js?1790315251758","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.775Z","timestamp":1790315251775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /platform/dev/config.js?1790315251758 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIiKjebi2k57RLyUi3MWrA7WWcu9T7Y1RWjZjR5RQfeKjuroWv72%2BDlbn4rKpMKkkAPzwTw7iL3dqqo0vo0ZcQSV%2FFD9PPKEMXak7p1lDEv1n8%2BVX0E2yKy%2Bof%2BNoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"912a69cc320a62666c55e6ad0cf60479\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc139bb0568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":1637,"mime_type":"application/javascript","magic":"ASCII text","md5":"501cd21a6e6f56aa118515f9a73195cb","sha1":"5769feb45ddf1b4aef74de35790a2523364c2f87","sha256":"690e8c5f3e3d29086390ed4d44617d05f539d8026ce72ebdf453a38605e1961a","sha512":"18926d24488999f6c2b44439d2216a45c276e7466201c2e0147d8b8efd4e655e9b43d9037049bcea5cd181b133ad447f8e2a87a2df0e0f2d220e5d67aa4ae37e","ssdeep":"","tlshash":"52e068b6327cc0745484862a6dfc1427f6dba6738d9c1e2eb4c4aa096e4dd6820b8092","first_seen":"2026-03-23T14:50:53.523647Z","last_seen":"2026-09-25T06:06:57.076426Z","times_seen":8,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/filters-ae804622.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.974Z","timestamp":1790315251974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/filters-ae804622.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uj2ZV2qvi2gqvURqKhosB%2Fny56K1CVVKri3zR5BKKePswx30brL6wm3hzNYckRK31SA%2FeLuPEndlzpZw4d8r0%2F8D3oaIm7ds8lZ3iU9exJzb15b7kqmxd%2FwQNzfxeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"7c92cdbb5186454a227994420a348640\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbcc568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3102,"size_decoded":2456,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"f262da30d52f5b073b1f011234682048","sha1":"0e6bcde2207d21919ee719c5d55568515eb53181","sha256":"789b6b67b67d09a7db3850def35ed79424b9793d3772b55a491869e4ce6b7adc","sha512":"628d5efc4a553c9012b937de9453d6569bb49d89493c3c7d2eeb346c05048734067cf6a75e643e8553dbbe1d9158037550352a3d130ab2bd8d70e71057a21b8e","ssdeep":"","tlshash":"5d5135fdfdd7613356ea6ef940288514b28ebe20686e0a4df54bd0455933888e0bf778","first_seen":"2026-09-25T05:48:30.569336Z","last_seen":"2026-09-25T06:06:57.096716Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/currencyItem-968544c0.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.975Z","timestamp":1790315251975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/currencyItem-968544c0.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5Ef%2Bym6m3UPJbVQwrsmlfR1hVfs3lkJj9tpWhSnSRMIBmur54%2Bd9fYI7C%2FnPbOSXlUEN5pU2WD8y%2Fa37VapzKxNlQlBFe033ssGtY6zNRVUuc6tjIFRxK8W4k1rKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"9151c6e3bc341fe2acf129810aaf2fc3\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbcd568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":2054,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1642)","md5":"8fcbb4d1cbafdb375a4e6515ff770638","sha1":"2eaf879a33d768ebc988a8c1c87e33ca8ab1023a","sha256":"5e4a807661ea6ad18e220cb798e905f1107f17ff385dfc5e9bda982295ff14d3","sha512":"2937f8958d2381009ebecc49f20dcdc1f85f936d78e29d7dccbd7ec149d0f75456232cecee59432ae80332d28a230116609d33b4ba76b91ca94107c7dbb7c282","ssdeep":"","tlshash":"cf31bc59aa01cbb5c7be9162c1b80415535dbfdb70064682faea244a3bc75fce324a31","first_seen":"2026-09-25T05:48:30.570818Z","last_seen":"2026-09-25T06:06:57.117281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/platform/dev/logo_144.png?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:32.294Z","timestamp":1790315252294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4e5fDUmS93fa9HcBXNVX8cxbTSR2B3zbYYFTlCxLUwhJnz6P8wcsOFBVQtUj0oO7%2FcqxKdxO6Ymou7shKjNRrr%2BrFLKaEkyrWGNmJ9%2BNZjJ%2F4raAKPNRjPb0fMdWow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8cb7b31668e7c4f0ec3ad9ae02855784\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\naccept-ranges: bytes\r\ncf-ray: a407bc16dbf7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25871\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25871,"size_decoded":27235,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"e3647298ed17654e424e41d27b08170b","sha1":"6428ddc3ed3b0587a6dd8ddfa614301663b7d2b4","sha256":"7aaf20df416596c067ae7587a4120fdc010725a0b889663837c529eca297f29a","sha512":"2784205d2974000f2fc547ccf440931b78a34cc04324d40b9600311f4a905039a7f67f7e90bc0effd961fc943e9d29628e0e8cfa678494c1a22f150bee8db193","ssdeep":"384:h6DbRkfbP3iHuGoEQSDVnm45Gk0U+Cc+VKtgcQcXL9:h6XHqEnDVnr5Gk5+Cxzc3XB","tlshash":"9ec2afa1fcd531942c01953225e3a41e48b2898bef43dd82bbdd40aaef12f559c9f58e","first_seen":"2025-09-12T08:50:03.430349Z","last_seen":"2026-09-25T06:06:57.106828Z","times_seen":18,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/financial.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.311Z","timestamp":1790315253311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/financial.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ3DZ35MT01HM4R\r\nx-amz-id-2: VGsfHC34rCmNLk3aSCkIOYigaAKzyR11jpxHBp8bwp+qeaoPdZ3J6myXr2i1HN7MzSv2FOROU9Q=\r\nContent-Length: 596\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:04 GMT\r\nETag: \"4f1dfd6250226229e8559b77a578897a\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":596,"size_decoded":1030,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"4f1dfd6250226229e8559b77a578897a","sha1":"01bda7c206f0f184dedf40d20a7945066481bbd7","sha256":"968691f0176f10bc358ff8b7b68a7f284571ff6fa1f972303c0b3949d9c2ef0e","sha512":"835711d39afabe5d2031d7e50f6e53ac01af390fb0f9fb2fe47bf11a9656a9a563b1f1814ec8bc85757eb68ee79a3cf6a1b6623a8411be4d39e01cffc0b501d6","ssdeep":"","tlshash":"e4f0029cd3d71c769a76076347490d28841d261808080f2cc29f7d55a4b67aa681aa33","first_seen":"2026-09-22T21:15:44.357498Z","last_seen":"2026-09-25T06:06:57.108127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":786,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/sport.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.315Z","timestamp":1790315253315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/sport.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ8FP4AWQ4T77SN\r\nx-amz-id-2: 9JEY3bfdbQ9ppWWyOBgtexv3g7ig6tqR5/2lVnC2NROc/0ClbR7ucm3cPbZ1+xk4dkiduYWUlxE=\r\nContent-Length: 586\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:10 GMT\r\nETag: \"b382c9c5e6172f944621eb84e87f2c1f\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":586,"size_decoded":1020,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b382c9c5e6172f944621eb84e87f2c1f","sha1":"4629be8ce698826b1b4552d0c5c690410069cd9d","sha256":"d096867b1c40933d3112728b64925d032542414748bcce41a061d73c12fee8bc","sha512":"f90d2b30aa74eb443a62d6d461fc7cc031aaf5a9ca6cac1c70bc5e5039e3b05618ae27fa29f2f31d9de572193ec7f08ec56c4456fee95819c6298f2b7f737e71","ssdeep":"","tlshash":"f6f0479363fecef58dd370231a1ac639b832955364570e04699c9d58142bc543530b47","first_seen":"2026-09-22T21:15:44.315535Z","last_seen":"2026-09-25T06:06:57.093747Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":782,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/svg/light/zu29.svg?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.319Z","timestamp":1790315253319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5D35MQy8ElawcyZoxKmgU5KNt4OZ8HB1X31VaLVjDwWfX1bNuhcvp%2Fy42R7PBhbpLudJyFZzbBT8KC1IvjNyBo%2BCvdEYyIK9zpsvD5NaCLSO9Wkc1Y1tgy97dw3ZlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"abb5eca8bdd71c623db91d7cec991707\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1d3d0a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":1809,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-25T06:06:57.108756Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/TRX.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.334Z","timestamp":1790315253334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/TRX.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ8FCTG2ZHKX1B3\r\nx-amz-id-2: LccciCsKyfOCwYMPjvU8HbaOlng9UDRdRP2AL1wI60Ns9xkED1FBwB5tz5YqfJUcB1MEQ8oaY7U=\r\nContent-Length: 6884\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 24 Sep 2026 16:43:51 GMT\r\nETag: \"4485ad0ffccf92c98a17fbc03505699a\"\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6884,"size_decoded":7279,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4485ad0ffccf92c98a17fbc03505699a","sha1":"491829698bcdfef16a76dbd51179a9407eb3b15d","sha256":"91329e8a180b0fc75f4b8b4cd252a64e4f13f33edf4aa6664fbde442cedff001","sha512":"1596e5a7cc7c103f73df1a61fd50c377fbeb4b0b71c8d6aabe7d0d021f7cdfd96679f33352527d74688cc2f2b5f6a1488f46b21e3d2d7d2f578a79f6f8e64ffe","ssdeep":"192:bya20oqaVgVwA5+c+Eq3IHUUDrHph1LbpwxS9wgF:byGoje6ol+xadLbbRF","tlshash":"62e18f13d15e5e08c6cf21308773564b6facc5307e0eb2c12f76a6514d2ba809fa132e","first_seen":"2025-08-31T01:19:13.315017Z","last_seen":"2026-09-25T06:06:57.111528Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":1132,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/fonts/Arial.ttf","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.570Z","timestamp":1790315251570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://krakenx.top/assets/index-9d89eb37.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1Tj89l4dq9espPkl5gqCLcQZdAAoomQzjgJRpqySYBEJbf0BjY0kIAeo7qaEp0oH5A45nE3EPgdnI0o9VRWOtZp6iHvjmE4Y8V31ERWnOUIiPLEDn%2BfkN54Id1lCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"84c6599aee68b60865c3675d8cac9f65\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc125b9d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":535017,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-25T06:08:28.938556Z","times_seen":8307,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-1a2e0624.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.970Z","timestamp":1790315251970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-1a2e0624.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rENhpLuPUUHabLaPMVPQs5QJFUDq80tGeYKrJ7tu9j%2F0%2B%2BRLWT%2ByECwaRB9H%2FaxlM6cDZ6c%2FubmujnTbAbsP9qDazzJ0X8WK82LrLBE0RO5dT3Qe%2FKefreXMzESTKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d922197ceae1736387896fd1b89703ad\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbc9568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":1870,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"f42418797a8b4ce9baf4d9b2eaebc823","sha1":"0c8d96e40884ad8c3996b5aefef5335b3d75699a","sha256":"34f4f145fe80aafccfc0d3f497478624d1e5e81e0dfe8757cbe77f781336ec45","sha512":"53c91811dc9160656bf8a2959364c14e6127b4a17926c47fb626d1602a6d283a01793ca583261a08b50b0f99cf75936770dbfdabe6519f2634a1ef7f68762060","ssdeep":"","tlshash":"8101bdf8fd0d8ebb0ea20a4141a13601140a1fddfa1419e198867d661be4950d7de72d","first_seen":"2026-09-22T21:15:44.34796Z","last_seen":"2026-09-25T06:06:57.082725Z","times_seen":4,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-7d4bfad5.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.973Z","timestamp":1790315251973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-7d4bfad5.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EzWmaDdmHxVNdqJZLS8ZayG4tUZBycwLZj53u2IrY%2F0UiIbvgFJc2VmZ1QhDPGYfSuI9bYAdx7037gQyrBXx%2FAWveeVKTMZecb6cwE1pSFX1s%2FROO5odF1PjPFkMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"198bf0d5fb8b9ddfea4f128c1cc62156\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbcb568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":2118,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2560)","md5":"85838485dbb48b6c0fd21a4b7cb05ae1","sha1":"23522fbc988251ad13175307434686f3c84522c4","sha256":"7d4bfad539ab4f6c71f1e9f0b3d34b67827da77970f2519be4de6b55f7041c63","sha512":"7f75886b8b3421c8c4d00b071a8243e319d5b83786ae85d024c6cbdf8675d896792b6ffb203b208ab072efb8e8c45c0ce620afd2601889b40b670d10bc005468","ssdeep":"","tlshash":"2e51504dfaa412355d37d9cbbe545a9cd0207e82e08a9ec1f10b961609cfea71d2031e","first_seen":"2026-03-23T14:50:53.519656Z","last_seen":"2026-09-25T06:06:57.083816Z","times_seen":6,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/currencyItem-01e3ae48.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.976Z","timestamp":1790315251976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/currencyItem-01e3ae48.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7F%2BjOiX5dI0PvcSz6tYwI2oQ71Nsdrhopc6qbpelEzB48YgQbb7FiVyX9QLAdnvfDB3CRun0E%2B8d7Qgl%2FQ96bblRycp7F1gzPas%2BUbEghnUMKNqxRqYitEq6wcw3fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"43cda9c7e15c125c7bf8eff3c4c99418\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbce568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":1865,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1749)","md5":"8b9574763e66b950142f8a22fde428ba","sha1":"358e7d63fd21b93a980f7ccfdea432c273706adb","sha256":"01e3ae4806b84a1f7ae0def6021b0fdf64039d735035d997e09ccb697730ab0a","sha512":"c20cde8312f587c548914fd60564f0b9fce90978ea36ec189431ff015eca930ff463e44e58c7e8e629c8ab173a4932522fb49cbd1b5500500ac6143e39a0b9da","ssdeep":"","tlshash":"b3319c8463150774f93ac4ce6ea8094c91643f82900796cde8cb0b272dcbee36b70d6b","first_seen":"2026-03-23T14:50:53.525351Z","last_seen":"2026-09-25T06:06:57.097523Z","times_seen":6,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/fast_help_loan.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.300Z","timestamp":1790315253300,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/fast_help_loan.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J6AXXVJ5G6PM7FK1\r\nx-amz-id-2: l7WojqW/PQMVENMBVgIrbLrM9PdXQ6sT3e7Lb/D4ZZy+ZG/g3YiB81/AaRh/w5l5Y3HQKy4dbyI=\r\nContent-Length: 593\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:02 GMT\r\nETag: \"d29aedc90ca88ccb962211c356aa04dc\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":1027,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d29aedc90ca88ccb962211c356aa04dc","sha1":"2c36a19b71ab33d6c665ffb9a14a086a0fb32018","sha256":"62129d922ba45d102f971bc4c7d0c41f1635d05ac5d6c01169aba08e59b7a852","sha512":"c92791fc850c73f85a9304b5e4beba62bf5fa6d79c8a7af3054386b01d163d29a21a18ca08c420fd852e44c45293bd316514a4b3c6f2ec017d038621b517239c","ssdeep":"","tlshash":"72f047d1e0e668f6a4bcd95c25942d917db70c712713318dc25f781a412e4366117d42","first_seen":"2026-09-22T21:15:44.354931Z","last_seen":"2026-09-25T06:06:57.080463Z","times_seen":4,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":10,"connect":257,"send":0,"wait":282,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/flash.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.302Z","timestamp":1790315253302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/flash.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J6AJ9D6R50NTF2QV\r\nx-amz-id-2: z/c/z27P6AEa756jkCgzXeWUZW6tOrpWd8MzReYCPUaJvitQoG0HIeIb9sq+pEJg8NpGMiX0Heg=\r\nContent-Length: 591\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:06 GMT\r\nETag: \"a82174711b54bc6771bd0154cf40f3fc\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":1025,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a82174711b54bc6771bd0154cf40f3fc","sha1":"c43c3df3f10d9a9a3849d540b60491d92d289346","sha256":"8dd416b3d0dfdb4b758d82ee9f20a086dd9a78f6f37c51e2b05265d267a9ac3c","sha512":"11e1459d9c732b018def83ce3e6eb33058be7873850d5ee91ea972c53c28b7595292d60697a67427ea5a91996e6d47cf56687338c8ade27c2b2292cb36fea1eb","ssdeep":"","tlshash":"6cf047c62e838475bee841183964bc00543414648d7d4f0df8d3f8e57b1d649b560a42","first_seen":"2026-09-22T21:15:44.363961Z","last_seen":"2026-09-25T06:06:57.088535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":8,"connect":259,"send":0,"wait":287,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/XRB.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.327Z","timestamp":1790315253327,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/XRB.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZB22M81P098YXM\r\nx-amz-id-2: 6N5gMxDah4qZoyEsVgkh8slXH/EepPfZvvTQIT5YGkXp4bAN0uW27awpDpssEOwt8H7Gcd8wJac=\r\nContent-Length: 2393\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 24 Sep 2026 16:43:49 GMT\r\nETag: \"2308acc5cb079e77004f6ae91cc7b051\"\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2393,"size_decoded":2788,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"2308acc5cb079e77004f6ae91cc7b051","sha1":"8f720c008e92589aecad00f9338e63dff7dba67b","sha256":"0875539d872ac02066c129360ade039e835bd7b9b2320f3a4d24ed4ef72c3051","sha512":"b18ef5a99aacedf38a3cfa584a8451df96097682fa4dbd5f54fb2ec4011811e3e800474dd5306d64f588f92e4210be0568725038b8664863f45dba12ba3d4ddd","ssdeep":"","tlshash":"f6410ba2c3b63a51b428f219ca4b044d150abeae3534f074714e365fe67d3637aa9051","first_seen":"2025-03-09T08:32:31.721939Z","last_seen":"2026-09-25T06:06:57.098785Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":836,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/DOGE.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.333Z","timestamp":1790315253333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/DOGE.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ7AT8RK9MD6AQ1\r\nx-amz-id-2: gryWQ9B6T1z/ELrtah20rMbAclIM9uhueVq+sdkFz7wzZJ0m5crK0CIiJxM4KxD7onC15QAxR1o=\r\nContent-Length: 1597\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 24 Sep 2026 16:43:51 GMT\r\nETag: \"1938a5ea7cbe7458795a834563258ced\"\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1597,"size_decoded":1992,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1938a5ea7cbe7458795a834563258ced","sha1":"d969fd854e1a997b7817ba60800cc1c7a6a1423b","sha256":"4a789f36f6ca12a6d1901ab8441a9cab7a4a9a5fd4ba87c887c4d45c729fffce","sha512":"e940ff74f8cb4f53b7463bbcd2b118e9d7c818eb8d2ab0a2ecfdce172e98cb91c44a4d5acd49402b12803c2b273d5ce3f96e1295ae612368bfb78e7f619546e3","ssdeep":"","tlshash":"bc319846a655c394f3cd0711c30b4a56215e579c786170c056b9a863cf393a8d5fef71","first_seen":"2024-11-30T11:37:49.082714Z","last_seen":"2026-09-25T06:06:57.109415Z","times_seen":92,"resource_available":false,"data":null}},"time_used":1426,"timings":{"blocked":1129,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/vendor-72ef657d.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.435Z","timestamp":1790315251435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3gLv9VZCl4d3c0v54y9i2oERYMswRDUC4QWJ9NUhcOm8IsgYGSMyHmM1UGY1zgAl5ljJ8ORcndefog8XX%2BlbRz%2BCix7cKCF4rPookBy615xRV6H1MNfYTBK9vhqqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d5972341c5566c72a0ec5307e2a5f8d4\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc117b92568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92567,"size_decoded":38158,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-25T06:06:57.115905Z","times_seen":399,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/defi_host_lockup.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.297Z","timestamp":1790315253297,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/defi_host_lockup.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J6AVHTMXWFM73MJS\r\nx-amz-id-2: ZoyNBCvsKkI3v93UcD5oz6QsVxQwHGS/4fxhzeqsgjny9sbUsQTYY+UH4aqGMOLNnM5Z0IxDSd8=\r\nContent-Length: 562\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:00 GMT\r\nETag: \"b925d599162d54b8a212ac898237d5c3\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":996,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b925d599162d54b8a212ac898237d5c3","sha1":"a4055ac487c899a0696f230a9ad4dbe735ccf70e","sha256":"3e25026b8943417839c0050f05c4839f6ac4c0ff577e40307cda4cec236cf41d","sha512":"8bda735d652d3703eb48f8a968b4640388c25f3c5d60f9381aac5dd382c4955622615fd52e12d050ac04267df1e482589f011ef057b4a55a43b62569fa885bc9","ssdeep":"","tlshash":"34f0968bfb041f088a3890f300039034e97e1111040739fd9ea872f89812048eee1e73","first_seen":"2026-09-22T21:15:44.367362Z","last_seen":"2026-09-25T06:06:57.079818Z","times_seen":4,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":13,"connect":258,"send":0,"wait":281,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/svg/light/mengbanzu13.svg?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.318Z","timestamp":1790315253318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkKpk8pwfMU8OX0lzYETiXxceR0WlZjezpJgQ%2BQUfQwhtlqd0UYvxm17v8yozWpwdqImU2TDHCbEd6ZSaANjg3NnAEhxwvdd4eXwVWtkEBJyMoz4rGAO6k2OZnEw8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5aa543564f1bcd763c3d99d9525778da\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1d3d09568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":1977,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-09-25T06:06:57.094374Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/vendor-eb205ae6.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.434Z","timestamp":1790315251434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/vendor-eb205ae6.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jzlPqh4cmBxIi7Dz20G%2BzV7RPxgSym9ivgxHbPyXHbgGWNJsMMlVIL6QQ0MGe3z83ESUSU1PbOQ4g%2FsZ1Qr0MRmE4S1zuL655860yNMabeD2UhadaXIqxAvLriVsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"73ae87529b189fa06bb23362c1d6be7e\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc117b90568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":879097,"size_decoded":290734,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02759b80e530bee3460c1747943c3e95","sha1":"d3151627784736dd9999a98f06bfcb2ab9f9561e","sha256":"70803b0026cbaee22493f49c638d3b795bfdedd46a91eb6a618bbd3f63c51298","sha512":"c46767425509f567a6548f782c6c09772b7ec20692d5c997eed0c7a834174d98dfaae0d0d9f3ced483c640869f2a9948edfb1d333feb91ef29d59752ca727b74","ssdeep":"12288:MWVxNiVrzNfnGMEAaFujpEgjWR8tSkHpcE13WYdWzoE0KEXYcba2VW:MWVHiVRntEbFsEetSkHOzYdWzoEYa2I","tlshash":"291529c97292f06147ab24e240bb0006f3396e59744e8494f1add8db7d6ad89e277f3c","first_seen":"2026-09-22T21:15:44.325781Z","last_seen":"2026-09-25T06:06:57.106055Z","times_seen":4,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/BTC.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.321Z","timestamp":1790315253321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/BTC.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZC97QSZJYSQEFW\r\nx-amz-id-2: Yap9UDhd3KKYQmtGBzYQx5YDOOofgiBNcMYELKqeOx/dDK9VK3kr52slkt5RjJonT9rdK3zMO6A=\r\nContent-Length: 2589\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 24 Sep 2026 16:43:47 GMT\r\nETag: \"8f8d12b8691a706a99e7544bd33527c2\"\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2589,"size_decoded":2984,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-09-25T06:06:57.112795Z","times_seen":378,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":784,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/ETH.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.326Z","timestamp":1790315253326,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/ETH.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZD43Q68NSVGCPW\r\nx-amz-id-2: nrwmjDoHvTPxv+3Z+EPlYB4/SR/jG8Q056EFw81l8Z9txpc4pwMHv/RE8gqQCQzitQmUdIJRSqQ=\r\nContent-Length: 3437\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 24 Sep 2026 16:43:48 GMT\r\nETag: \"174b0414fece541456d82f84a296e380\"\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3437,"size_decoded":3832,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"174b0414fece541456d82f84a296e380","sha1":"b5705bc9d5e6c5d7f70e9a1a2773f7211f474657","sha256":"99bf2102cc13a51bb226f931b8d0fa4c5b3ca9dc4179167e89d7ee3f677c3fdb","sha512":"6a5fb1f896da4d1bda7474e19880294be83017a5da5cd39113adfeb5032cb9b7566e706845209e4312408a99b7305b27a84748637bed44aa2622246bea0bda94","ssdeep":"","tlshash":"a5615d8d039107bec5d46349519fd6698c278705862f4fe84b67c8fc0e99dccc4c6b59","first_seen":"2024-12-25T23:55:17.402619Z","last_seen":"2026-09-25T06:06:57.110897Z","times_seen":111,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":833,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/charting_library/charting_library.min.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.430Z","timestamp":1790315251430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Lgr%2BevACF3FLuyiicGbV5VbeiHJhFOIIBo1uPxhGs861nNp3CF839jO648BroHXTsIVSAgKe6DJTCGPOuXbiTZfTXvHQ2SpcL51UtQw4HYF0hh3fNtkW60%2F4C7IkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8ffa56e1e39bdeb92b1f3adc79bfa4ff\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc117b8e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4585,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-25T06:08:28.944982Z","times_seen":1496,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-9d89eb37.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.437Z","timestamp":1790315251437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-9d89eb37.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWO6zTr%2B4l36%2Bkp%2FOXisyl0z5eDTF3KQT0MvyqYbXtTzexymsnNguA97T0apx914sQZyYB8Sp44WxLRdDuCHN5MImWSW6%2BXpAee1GdR7MNgw05I8%2FCcN7b%2Bb3b2fZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b8952b44d1e2124df41e83c917084b56\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc117b93568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304223,"size_decoded":67633,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"cef088889f4d09b5827b6060366c65d5","sha1":"edeb7d47048d8b44b8ca2b71ead17d2cdbf2cdb0","sha256":"9d89eb3744216c6ab5069e705d594e68073d1dec8f62694b5e41e7a8b1b40076","sha512":"b3cb9c9b3642fc28399cedee2de86fb1b9eb4a361b93caefa49a648719afb54f13a1790604198855670159d45a01fc870e298936096431d8a5d38e4b4c8a3f12","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05TT:+B/54NZ8w71ZACkFDS3vyf58rBeV05TT","tlshash":"aa54c6a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-09-22T21:15:44.338894Z","last_seen":"2026-09-25T06:06:57.121445Z","times_seen":4,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-8f252d21.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.968Z","timestamp":1790315251968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-8f252d21.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x80FXcCU%2BxbU71ieBm8Vx542ZmQg2xDL8Gqmm5Rp9vWTAnS%2BoJJInKWWRGnMfA2vHBxHNB%2BxWdruMMybPWbxtqC2F2nZgsCm8C3Ti4beX952Mlcuc78rWfwSVbNedA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"396353e61e933d6b10d7ac565b357736\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14cbc6568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":1434,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"64a6e0c70d0734eb067de41025695c61","sha1":"3daf9734bdfc9e560f098cda9e73c926ff417cc0","sha256":"8f252d21da9b1d0151bbe1db628bfea000d4a662b1ea0a42047e42c696b4bed7","sha512":"ccd349b7fcc9f5202a6ce9516c4d66b482140a85df80d9777b3957d0cf5380689fc17877be168c95b526f3b74d36fca4ff9aaba796421f900f9f27255e403ff7","ssdeep":"","tlshash":"54a002ad115a3914b2224341ff0ae90dce6869739a91520567021da135cba4e655920b","first_seen":"2026-03-23T14:50:53.594382Z","last_seen":"2026-09-25T06:06:57.114735Z","times_seen":6,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-bc011be9.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.972Z","timestamp":1790315251972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mp2jns0HSNHNHDqGutJaczlD2UyZBS8qp1P3rvjhATjKDRGeB04oU5EAPtRxTwd8QsfizoeikIrjkSUc%2FssRU2X%2Fo65%2Fkz8Ybq32WAcUdbHTdDN4OjtkLeJiC4r6qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"771bcdf8344342f263f42571d273911a\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbca568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":1551,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-25T06:06:57.079178Z","times_seen":1619,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.gewk.top/ws/3b996583-a321-474c-9197-ec3bb798d2bb","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.981Z","timestamp":1790315251981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /ws/3b996583-a321-474c-9197-ec3bb798d2bb HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://krakenx.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9qHi1N7Rsn3iC6btOHI4FA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:32 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Dbyz27VRFW6cdKCVwTPUU7xpseY=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":441,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":252,"send":0,"wait":254,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-aa1865bc.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.969Z","timestamp":1790315251969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-aa1865bc.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nuMCEbgmvjY%2FZiilpbEMk1ng6aivJccCxhSKhdfs%2BO5rxY0qP7VlARJvBtYGrCH12vjl%2F9o1opjPfge0ykcYxNEY8ur9d8OiPAWOt8AQ5H3%2FD5HgTWHiStLw1z0wkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"cbf044b979e036206f765a2e3d66e01c\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14cbc8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4663,"size_decoded":3461,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4658)","md5":"00e217a1bfeeeefb54b7daeaedf44551","sha1":"c46e36007911bb294aa2beb863d5eaba2317a99f","sha256":"d1e5e1eec3ea6e6a5565807cf55dccea55c8cae588d38426684d0405ba6974d7","sha512":"34288661f5b1ca819337d4bb4eea524014f6f130bb713531cb1bb94cd4db6a1ce1b9343d159323cc0faf9e05349810062b2905ed9fc4fa3ee4b26076e83e8b65","ssdeep":"96:qgq+CY/9Y6qD+wSXNrFqPyAtb6airIP+jn3hv+e3XfWarejt:8+CYFY6qiwS9YqAtb3qZ3hv1Xu/t","tlshash":"c7a1c899f80286beb9671440489c0010319cbbffb10948f1fbfead0ab7b4979d364766","first_seen":"2026-09-25T05:48:30.585016Z","last_seen":"2026-09-25T06:06:57.095836Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/platform/dev/favicon.ico?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:32.296Z","timestamp":1790315252296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mgZnlkOriUb%2FV%2Fzd1I9OnUTmqLZnvCqKrpVGkatL1YP0UENkEd91MouEECHmnUrl7Q7krOPi%2BO2c2RzHrs7af8lxNtWXs9scTIDtcUwdz%2FjQtqxsv91x7aw7MZKvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"7451e6e9a6f40581790c8c4a5dd3d2d6\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc16dbf8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25871,"size_decoded":13135,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"e3647298ed17654e424e41d27b08170b","sha1":"6428ddc3ed3b0587a6dd8ddfa614301663b7d2b4","sha256":"7aaf20df416596c067ae7587a4120fdc010725a0b889663837c529eca297f29a","sha512":"2784205d2974000f2fc547ccf440931b78a34cc04324d40b9600311f4a905039a7f67f7e90bc0effd961fc943e9d29628e0e8cfa678494c1a22f150bee8db193","ssdeep":"384:h6DbRkfbP3iHuGoEQSDVnm45Gk0U+Cc+VKtgcQcXL9:h6XHqEnDVnr5Gk5+Cxzc3XB","tlshash":"9ec2afa1fcd531942c01953225e3a41e48b2898bef43dd82bbdd40aaef12f559c9f58e","first_seen":"2025-09-12T08:50:03.430349Z","last_seen":"2026-09-25T06:06:57.106828Z","times_seen":18,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/LTC.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.328Z","timestamp":1790315253328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/LTC.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ3PC5XBX5N86KH\r\nx-amz-id-2: M3sZKdImgAoOzdqdkf8o8SUKgwjmH3btemY+HPFzsaf+XmRNnVOK7PPZuoTNAbQioc+bd0+7mTA=\r\nContent-Length: 1660\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:24:24 GMT\r\nETag: \"95507ffd15fb458032339c7dc775ed70\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1660,"size_decoded":2095,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"95507ffd15fb458032339c7dc775ed70","sha1":"e374f127ccd850868577125ddda835210f9f9c12","sha256":"7160750bcbc115ac8a3229bc1120fb59e96a737d607a57b42fa8e2b092a14159","sha512":"6fe799554171ee690f22ad0c86752f8ee12826ca378e15a0531b50d1f84458805ca6abc9ff8684bd62171afda6ed546ed21ae7dfb6689de65a248351fc1f3a58","ssdeep":"","tlshash":"82311a099a662da282350f2ae84c6128cd012340cd0123d7fbbdfc12d2e81c1503cea0","first_seen":"2025-03-09T08:32:31.736669Z","last_seen":"2026-09-25T06:06:57.113431Z","times_seen":83,"resource_available":false,"data":null}},"time_used":1344,"timings":{"blocked":1055,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/notice/list?key=ROLL_NOTICE","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.341Z","timestamp":1790315253341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://krakenx.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":457,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/banner.jpg?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.871Z","timestamp":1790315253871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/banner.jpg?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZE534FY444J5E7\r\nx-amz-id-2: I3n/rcE6pJLqHYz3rCK5xYRj/cthKfG+WJgnUU0GS8szQRRHp+wm3FqXzQ1t+HtGj0Ri1bhvZBU=\r\nContent-Length: 103906\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:25:17 GMT\r\nETag: \"83c4b9b63739e7585071e91551a50675\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":103906,"size_decoded":104344,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1138, components 3","md5":"83c4b9b63739e7585071e91551a50675","sha1":"d514ebc75640b454fee45d7bfc55119eebab7d22","sha256":"6af82591225031dc8fefb4fb7821fc56109f26d3bd0d0df3108efe3dfa4cc2d5","sha512":"37bc36909e7a0df3304137b34990921070f8fe210a9a0ba3ade99dd42688bcdbd695b001aad3862531a204685d9e31bd204c6987a1527e13343eb06bb683faa4","ssdeep":"1536:EctElCQRmnn6B3iL0YXS4tDSansjU+VDWaIHHgJA9we8BSEf1018p8A6Yn72GEO7:EcAFRm6AL090D1sjU+Vaay05pjNwGF7","tlshash":"76a301dbaba3ba0be38555b5065b6f337cd6da0d04afc37d20000e772da69385f91494","first_seen":"2026-09-22T21:15:44.311836Z","last_seen":"2026-09-25T06:06:57.086196Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":278,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/getAllSetting","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.980Z","timestamp":1790315251980,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://krakenx.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":447,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":255,"send":0,"wait":256,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/en-1878cc81.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.134Z","timestamp":1790315253134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/en-1878cc81.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://krakenx.top/assets/index-40ed767e.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ysj2nNJEI38nEsILd%2B9zlEhuMIE50OpDZ0PyzyX4HF4bMJO3rY%2F3hAR6u15cJxuL5%2FsekCOlIRAL3uDdYqIe%2Bt7tE1Jj2jXR7dtk2z0DRuqdxmI1NYEzJ7GEcgN5NA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"72efa11dfbedb14ea60e4182ea3c8b85\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1c1ca1568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41192,"size_decoded":14122,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41169)","md5":"d67e72876cf3806019ea62cae35c016a","sha1":"90c5d37d0d737e4b081cf805ce58f2d9681a3cf9","sha256":"5ca356f2f09cb0241e71488d06f0752a9d0858d1793de285f56ee5cdc4848ffb","sha512":"e1677fd5141be147981b2a2388b7595df9392d43408149fe7bf39e495cd9d392bb9a99aa7fb179410fc1b211f3d10d3ae5541d3458accfbc02c7e5fb602dd109","ssdeep":"768:+nLctZcEw/o7ruOdAFsifnAMC2rAaAKFVoP6+6sPG9w1mwO6fpk7aOLxO:mL1ponuOdebE2r7FVLsPWwqLxO","tlshash":"d203e7893e1a989a05f3537674ce6e1120f60ac18256881f4fedc9fd53d2b676363b34","first_seen":"2026-09-22T21:15:44.336518Z","last_seen":"2026-09-25T06:06:57.09164Z","times_seen":4,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/fonts/DINOT-Medium.otf","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.281Z","timestamp":1790315253281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://krakenx.top/assets/index-9d89eb37.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyOt3PGbAu6atAqqT9TXWRrgSMNcNmGm1GU0ckOsEGfbfKxDrrvE1C%2BbQVRnZ3djx0Nh9%2BtwOx%2BHdqEYAZnAF%2Bhmg1znixvO8MqggCm4xtLZpwSPeO2vK8htSGf2tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/otf\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ce633bddbf0dcb02adf58f51f3c38218\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1d0d03568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":32762,"mime_type":"font/otf","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-09-25T06:08:28.955351Z","times_seen":7659,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/DEFI.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.295Z","timestamp":1790315253295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/DEFI.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J6AZYFJVD2V6ZP09\r\nx-amz-id-2: euF89wQfnHT+W6MM0Z8QJcjghGJ57fRy1QpD50oBPiFnPV6aXhVVuZQcqUIMbbuF96ELrtjm44I=\r\nContent-Length: 572\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:18:58 GMT\r\nETag: \"7d5795bd1f0018ee357ccf9bfe5fddf2\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":1006,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7d5795bd1f0018ee357ccf9bfe5fddf2","sha1":"8dc370598d77048d47d5838aebcd5d2ca977cb15","sha256":"2a2d06232a971b1d42d16f165d50cb6bf6b73df33561769fc673dee016056ce4","sha512":"aa9d5acfd38d851fcac81a1b3d919e23ccafb3ec86e7e4fc7ef48897ceb773c8c76383b1886d9376207335669a4ece91e21ff9ded2430d3b5c4d4fe99c11f66a","ssdeep":"","tlshash":"73f09693196a8522d0a2d3161cb331a1cc793c255622fcd0fe081d70c178c53a5d831f","first_seen":"2026-09-22T21:15:44.329905Z","last_seen":"2026-09-25T06:06:57.086862Z","times_seen":4,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":14,"connect":262,"send":0,"wait":284,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/svg/light/mengbanzu12.svg?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.317Z","timestamp":1790315253317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VH3NU6nHcNEkYUWzntOV%2FTLFPPZF7ZvOxH7S150TE0p%2FIUwyY5n8QQzR%2BLTk31J4SQIm9k%2FBCd49bJwiFP2Z%2Bv%2B38Kws2B99Q753mTahWC1OGFzNNCkoHhKzjQnevw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"9a7a824a82df399d6b7cdd4413b06fb0\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1d3d08568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":802,"size_decoded":1829,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-25T06:06:57.084961Z","times_seen":1103,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-48c7a672.css","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.977Z","timestamp":1790315251977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-48c7a672.css HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqpPV%2BNjQg9SZxX8L1FrdSpKx0DFXDCb8AvMvE5YtWNIs04Ym2CCKAo8LyfuTaPXPL1XWXhr38rxLDWU%2F6I8IdcLWYyGGbsxN%2BZDCB%2B5YD%2FNoXAQt9R7%2BwIH%2FfueJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8138413fda8c8c2d979f9102d9b1c664\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14dbcf568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10151,"size_decoded":3526,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10150)","md5":"842a9d0c045944e2237e265693c8c3e2","sha1":"ac649cbcb2e9f9a3fe6fc4cdeafd8005c4f0dbb5","sha256":"48c7a672b1a608855a293b4f385a14d35be7ca358ef0de4c02c00663424779d7","sha512":"a8d1b5bbd74766c07380600105a7419df374778755dac2c701f63bd213156205148d0237177a9820a7e0d3818e1e8b694463a9416c4469a25a1de29f1dbfab80","ssdeep":"192:EXXvx4kh3mqOyI5cL4IVeYDd+5Y6LHmLkBfW:EvDZWW","tlshash":"0e22563df6a62238ac7be199bad44ecce51eb901e693dda4f61785264cc76e3173004c","first_seen":"2026-03-23T14:50:53.560119Z","last_seen":"2026-09-25T06:06:57.090042Z","times_seen":6,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/promotion_center.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.305Z","timestamp":1790315253305,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/promotion_center.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J6AZ40DZK34FR0F5\r\nx-amz-id-2: wKJVnBsZcwjwPbhCvAXOQSWc5n0C4Sewo0BKw0FUp4OzzROmbPU++oYhZiAO+GhQJYUDtriR5mo=\r\nContent-Length: 609\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:08 GMT\r\nETag: \"1b1dc675d11982bb06b02107edd7f4b9\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":609,"size_decoded":1043,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1b1dc675d11982bb06b02107edd7f4b9","sha1":"7e73bc43396623cdf7565268ebe1e1dc82eb0e0d","sha256":"6145ac2d19c8e48e009ee4e7f143cfd9c49974ece823aea71ddaf10756a4c1cf","sha512":"4cc8423d7b229e408260f3dc8bfc838467abe17ef13127de375fcd0cf8d4e5a55c63fb4f569d1d67805f5dbfaf783f0dfa0a5ea17ee0a0c4293ff50c646c0f3f","ssdeep":"","tlshash":"e9f00ce02a81bfb4c02249228b2c623668b844d39a94936d48c2ad469d0b809cbdc283","first_seen":"2026-09-22T21:15:44.341523Z","last_seen":"2026-09-25T06:06:57.09814Z","times_seen":4,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":4,"connect":280,"send":0,"wait":300,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/svg/light/zu447.svg?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.320Z","timestamp":1790315253320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKXFbOEnRxiIl%2FLVEgIbN5dAZqn0jVUtzrSeF3IglC0evyBEcmvD%2FhjXHxj%2FCH1sMgOpZPvVaA%2F0TApqiZzJBhJPe%2FkodoqU2gT%2FmQpOyHigN0xHEZuajvyBMKw%2FRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"518a87303e8aa0d326c5bbc1bca06049\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1d4d0b568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":1603,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-09-25T06:06:57.118261Z","times_seen":560,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-00e1f855.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.965Z","timestamp":1790315251965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-00e1f855.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nY27TNjfyRx2YNvqqqf%2BAvt6SEzI0qfBUDhl%2FgV69mlvnd76VMZ6YV1sodpXMW7J8ZveUfRqIvK3hJfsxT2ZyIeq66%2B9TftiqWcC6izF6v%2FuDqpIAU4EUSpWVBzDTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b6432448e3fa6e1d8306ab63309d2e43\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14cbc4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14022,"size_decoded":5357,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14021)","md5":"6efac5738239e291af9848fe82de1ea9","sha1":"e3484bb4070467facca257e76f010f67ee3817b9","sha256":"49b6428abfc18c42551119b23117a7d452dd06efb60fe3648580a64df150bb5b","sha512":"5cd128474116bd2cba5b9f955e631f5b413fdcd9faf37a2f94d79d62aa73963a7b2bcb2d53cca472e52da7f60de34f35413bd762c19d619f2e6f4f69db2defd9","ssdeep":"384:LkKzqBT7hRf0xuF0FtAfU2w6KImMuEFuZ36kXMMzprhQhdCUSD:L9CsUKtAfUnwbAprhQhdCUA","tlshash":"b852e865f902993df6ffa05140980050b66a7ffb411a49e1b9bc6d4f7342eb8f389708","first_seen":"2026-09-25T05:48:30.592899Z","last_seen":"2026-09-25T06:06:57.110121Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/BNB.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.332Z","timestamp":1790315253332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/BNB.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZDY8AP6KZE8PSS\r\nx-amz-id-2: nXxs8FufBWSTaZYjpyGslQBPS/NTanvhH2BSNU2RWGQNQMahBDnFSn+1Ap4aeJtK+E+a+rtENck=\r\nContent-Length: 1494\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:24:27 GMT\r\nETag: \"fefe5d0b26806c858130f0eb454e1106\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1494,"size_decoded":1929,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fefe5d0b26806c858130f0eb454e1106","sha1":"8f540e4d9b853acc0145bd37ec42fdeecd7f15f7","sha256":"7aef69406a4a5c74bd3569222a4fb3e534c8c6c1446755fdec7d7687bbf38a04","sha512":"98af45cf72a49d0776a57edc8cecb299d206723d1772c64439738e508f27ab92f0a06608bb76023267a34a8b433cec216329a8847836fc381f818ed2487fe3ff","ssdeep":"","tlshash":"2f31fce221413443e91adab851af83637ce009a05b8392456dd576d7b779ac45b44812","first_seen":"2023-08-29T23:22:40Z","last_seen":"2026-09-25T06:06:57.089297Z","times_seen":101,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":1055,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/money.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.338Z","timestamp":1790315253338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/money.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ03672QTVE9W79\r\nx-amz-id-2: 8lntJCg5sWUQrpcoXSeyeuBDMHE/uk7MSRN6bbbdwDjz1WbFEw8Q6xbyie310BXGPw9U20g2JGg=\r\nContent-Length: 542\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:18:52 GMT\r\nETag: \"92daabb8d1c9ff2915f7f9c5593aa63e\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":542,"size_decoded":976,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"92daabb8d1c9ff2915f7f9c5593aa63e","sha1":"2f1757be5238609ba2bd6fc258cbc24022f5adb4","sha256":"56b944b789525f1845ec1023dd3996fd89bab85f40e5c4a836e93d88e7583f2a","sha512":"b399c38b91c776c2acb933cc3d16d3a656c4456752e3c3d663fb35753916eb589a077a26fbfb7397395134eb7039b2936880ea5e31ace011991613f4e3d0b877","ssdeep":"","tlshash":"5bf02663531443f8e54005f945cba1c90d624a259d316e889f46c0657816c15b7b53c3","first_seen":"2026-09-22T21:15:44.358828Z","last_seen":"2026-09-25T06:06:57.104293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1426,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/SOL.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.333Z","timestamp":1790315253333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/SOL.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ9CR1DC2RBFYGT\r\nx-amz-id-2: Vsd4qO0ic5wOCyN6IqDzV/yDjwym1t07hWhzR2DIsFtl307eJUC2V4hxzKLFfa1mj8ztWIrsjMs=\r\nContent-Length: 4222\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 24 Sep 2026 16:43:50 GMT\r\nETag: \"0bf2916a9c679e99dc9060ee1cc2dde5\"\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4222,"size_decoded":4617,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bf2916a9c679e99dc9060ee1cc2dde5","sha1":"7b54d567258f440651c4a41d2f955c9c412451bd","sha256":"b9296ce1118a6d150e57049190aeb4c024199e0787e0c6198c244230b8d704f5","sha512":"1749edaf7c45f50df246f209b5d26801f3ec20f449a82a9deff48b348c5fded272fc3cfdaec44eccf27ffb5225774a7ec0c6a564d7a0e558665411d5bc3c8675","ssdeep":"96:hvuOg3LKz5FT+ae8o5VngkGBh6WQZsrHzXIY4:yYdzinN6wCQY4","tlshash":"ed915dd8f39d7610a3c05d3590aa3ff78ec6818c0c258888f926f67c54ad4e11c85e5a","first_seen":"2025-09-08T14:29:09.791256Z","last_seen":"2026-09-25T06:06:57.119257Z","times_seen":65,"resource_available":false,"data":null}},"time_used":1347,"timings":{"blocked":1065,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/rank.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.336Z","timestamp":1790315253336,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/rank.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZ0MXXSHFA9W8P3\r\nx-amz-id-2: ozjSeTTyhS7dlZSm9UC5FZmgLAkQKeVT0RPnS+G6PuEt2Eh8UHpJKeyJLb7lfmhyD5f4XFYlc0A=\r\nContent-Length: 607\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:18:56 GMT\r\nETag: \"10a7982fd24478df9d49b0c45bd1d66f\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":607,"size_decoded":1041,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"10a7982fd24478df9d49b0c45bd1d66f","sha1":"14dc7849e8a5c1e13632477067caafad86b62394","sha256":"109beaa556e2b1efedef75d3cb1dd5d67811a6c518da8637c52cb7f4189d6e58","sha512":"cab58ef5e91827dc210dfcad4a8a38345f306d0c3ce01aba4a65f12ced05438cbca5966441e5076694c1224756f93fd4421e1fefde9c01069fb1727c00060a4d","ssdeep":"","tlshash":"9af0477b73cfe605a46723a35088879d1c9584649f390ec497e230d7d7514513cace43","first_seen":"2026-09-22T21:15:44.352485Z","last_seen":"2026-09-25T06:06:57.077215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1622,"timings":{"blocked":1344,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.340Z","timestamp":1790315253340,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://krakenx.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":457,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-40ed767e.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.432Z","timestamp":1790315251432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-40ed767e.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tgb%2FUP1u%2FQnVo5HgsxqZfKfxkir9XtGdVTh26VGATIJcpdWyCtN%2Fv212HeEwbbiu4nezW56vFu%2BIwosacwHMo2%2FX0myyPBe8AepTCLqOJ1CfdRBBl2SR6FDPhibj5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b5c93b45e14533505745baedb2f58a85\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\ncf-ray: a407bc117b8f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104328,"size_decoded":29320,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65457), with no line terminators","md5":"df6b19a0ef479442f8a29a8c8a86c669","sha1":"57c86a6f22b1f13de8ea1bd66b6e7029933648d9","sha256":"74afc699c688e4ca97b726a91d109b6bf22de14d2a6c3ed2e8ab359e08408fa6","sha512":"52a76babefc86d7efe2d4074ccf81f47fb4a254a86d7deb0bfd59c4d4acf3dcde34ec547e45a6880f6e0ba12ed4640ba73a3601a289f5cfb86595fb192f8c37e","ssdeep":"1536:mOmmlOZh+0JM/FZBTy0A+N0NpFGDaWHrp+sa57:mt/OE0As+7","tlshash":"e4a35c8d950b1fbf58fd0885a55b4a0020ad1fd35988ccd3b3ba6e4537fac94639a72c","first_seen":"2026-09-25T05:48:30.597405Z","last_seen":"2026-09-25T06:06:57.104985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/trade_tab6.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.308Z","timestamp":1790315253308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/trade_tab6.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: J6AKDDWZMNM38X3H\r\nx-amz-id-2: TuueNwH90E8zV8a9WgpX2SWnJAJdUZsnAiEoY49KGrDAnxYtpUQyTF+9SirLKf0eWwtamLpZq1Q=\r\nContent-Length: 613\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:19:14 GMT\r\nETag: \"e79917108a557c2a6b442190c43876a1\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":613,"size_decoded":1047,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e79917108a557c2a6b442190c43876a1","sha1":"913a559b6bcc6e0072342a3e6cd6d6e136b13f4b","sha256":"c04197b7ebfff277ee320babb3dc6951055c620f3a93d2db71c49af4a97a89a3","sha512":"065bfd336ed8c11c2b734383e50ccda2d861a01d24f83550c015f7da1b4fe7ce5339296e8938184770ebb8b06bdbf6272f8d9b6d448e64052c3515de647fafac","ssdeep":"","tlshash":"f7f0027a67381d7889eea77f5e43dee029305524eb35874a8843b8e03409993598a843","first_seen":"2026-09-22T21:15:44.356226Z","last_seen":"2026-09-25T06:06:57.081546Z","times_seen":4,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":272,"send":0,"wait":319,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/home.png?2.0.1790156205908","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"52.219.132.195","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.335Z","timestamp":1790315253335,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/home.png?2.0.1790156205908 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: HKZEFGE871WD200D\r\nx-amz-id-2: /4sBoxjpJQY9m/L8T2pZ5Q2UlrDBQm5XzLL6P5yf5fHlCKmxzCbc3m8PfFLuMrM++p+P5Ym/75M=\r\nContent-Length: 671\r\nAccept-Ranges: bytes\r\nDate: Fri, 25 Sep 2026 05:47:34 GMT\r\nServer: AmazonS3\r\nLast-Modified: Fri, 18 Sep 2026 11:18:50 GMT\r\nETag: \"c6a4aa9648eda2b9f9a7eacee277f047\"\r\nCache-Control: public,max-age=31536000\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":1105,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c6a4aa9648eda2b9f9a7eacee277f047","sha1":"77b0bf30235baf20e998a000457163234e9feed3","sha256":"7ae08eeaa567f1d96d709e99b40ff86d9de6528c6f3f4d56eaa50e427f5c0766","sha512":"0d8ab9acb9a74487f5b999b6d09f28f1b02ee7b546d952143a49fd2ff0b38fc4c10c4563113c48cf12949f08184547948c52d5ccee35b4bad8d3c20e42a4a330","ssdeep":"","tlshash":"4501832706c96330ddbbf137a181a3e62e135ab32832eda8ff096815c0364c06897300","first_seen":"2026-09-22T21:15:44.344977Z","last_seen":"2026-09-25T06:06:57.103036Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1627,"timings":{"blocked":1341,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/getAllSetting","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.342Z","timestamp":1790315253342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://krakenx.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":457,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:47:31.101Z","timestamp":1790315251101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKE%2BjpnyaDlQlEpz1IiIzW68LwxwPLW34U0y9L0qjukr5Qlh7Wrgpff2hQckgxEfMKkn6ZkiUv8t3MgF%2Fp6OiqoeB3BtyLSSQgvNdWXTvVTk9Hd3RAvXwddurN44Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Fri, 25 Sep 2026 05:47:31 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: a407bc0fdb74568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5310,"size_decoded":2999,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"062bd8d7f761ce669ff1c0cd8b322111","sha1":"6fe07de03e4286cd136202bc1ab866de6665c7a7","sha256":"fa3516d32ce24c798113ac9c24b80ddc51e66255be51d46bb046ded5c6c5a402","sha512":"34063f99fbf2ede7fb228513f1653a7f6d01ae01d668762686573c35e313c3352921bf8a2e631c18625aa79fde5a1cfff5fa0c9400cb16fa21ee737e15afcde2","ssdeep":"96:Tr82NBZ5yKuX67VB8at/Sfr6TCZydHRH/gh2mUsGKAiowGpuB1niH5iHf/H/w:TF1u67FOZCxfM2nfD3bpuB1niZi//fw","tlshash":"b0b14ff3adb4d85a2362012aebd7f0189ea1519385294c94b4cc80fd8fd5fe584dbbb4","first_seen":"2026-09-25T05:48:30.600613Z","last_seen":"2026-09-25T06:06:57.120673Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":56,"connect":14,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/type/defi_activity_type","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.342Z","timestamp":1790315253342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://krakenx.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":457,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/assets/index-ad607526.js","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.967Z","timestamp":1790315251967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /assets/index-ad607526.js HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFKFV1wyDofEv0ENAJX0G9jH7b76Oqq%2B0LwMRDW9GsXaMbIdY3Fl2WfEMtrlNlp8d0LCVZXI8M4N%2B8U4BQ%2FoA2QTRqBKFgVrF9INJ255myLgVUl23uoK%2BvgB8kAHYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"afcfc3806937897d5915923caa36b5ce\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:32 GMT\r\ncf-ray: a407bc14cbc5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":1645,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (387)","md5":"b4ace07668ed4ec31f3eff870c4c1d52","sha1":"6d20fd614e735c7a3c62f300addeaf0549dfe91c","sha256":"d5c00268e78c2404f6504eeb8a72ec6c9afc886e00c7b88735e67e836f5fc9a6","sha512":"56f540b3f2dd65f425866efb55e8902d6da8de7227bb5a8037a6351327e85c2301f21239bc137c4d9a522fa9b6d60a76a0ddf0bf398e4dbc7a1b0c3aee11acba","ssdeep":"","tlshash":"77e0f10f2a59c6f32ba38cfce1330811e20426040300d1c0e1030a04a2780e3a05f378","first_seen":"2026-09-25T05:48:30.602021Z","last_seen":"2026-09-25T06:06:57.095004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/getCoinList","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:31.982Z","timestamp":1790315251982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://krakenx.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:47:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://krakenx.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":447,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":254,"send":0,"wait":254,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.gewk.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakenx.top/resource/svg/light/user.svg?2.0.1790156205908","fqdn":"krakenx.top","domain":"krakenx.top","tld":"top"},"ip":{"addr":"104.21.80.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakenx.top/","date":"2026-09-25T05:47:33.292Z","timestamp":1790315253292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakenx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 06:25:55 GMT","end":"Wed, 23 Dec 2026 07:25:53 GMT"},"fingerprint":{"sha1":"88:07:7E:46:2C:47:0C:B1:9C:E2:EA:ED:9A:1E:29:AE:74:AD:5D:9D","sha256":"CA:CB:8A:AD:71:83:4B:28:FF:26:87:88:B8:89:A5:72:0A:C7:46:7A:2C:5A:72:2A:61:F1:67:99:DD:47:C2:03"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1790156205908 HTTP/1.1\r\nHost: krakenx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zD%2BZcn1wcRzMAXiOc42Jhpq4kXIXTBMiGU9IYTj3kqjFa4bsV40QRyOG7nby%2FBNJA0nvQ4I8lbG3O9lQjR3lA9wxrNiOgNhxk%2Bf8yvvFxwKJn5pTMG2kA3MJ1C71kA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'sha256-O/oq47gSgth/DvO1fqd6P0bCnuIF99H7Z+kNi0IkXyg=' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.gewk.top https://admin-api.gewk.top wss://api.gewk.top wss://admin-api.gewk.top; frame-src 'self'; object-src 'none'; base-uri 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5dad603e3aaea7e4abf556870236464a\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncf-ray: a407bc1d1d06568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551,"size_decoded":1684,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-25T06:06:57.093111Z","times_seen":483,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"krakenx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
