{"report_id":"997a8a78-253c-4a4d-b18c-daf3d76fb012","version":6,"status":"done","tags":[],"date":"2026-04-25T12:08:26Z","url":{"schema":"http","addr":"kraken-kra38.net","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kraken-kra38.net/","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"title":"About Kraken | Buy, Sell \u0026 Crypto Market | Kra38","dom":{"size":21466,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (789)","md5":"bf77b370303d63135806f629ff2f6ae0","sha1":"905854c3e2c9688e92796a24a116950328723865","sha256":"5fd2b08eed18ab2136408bc200aa7613204943fe107cb5f82810a15c416a88ce","sha512":"449ec355742326f8ad348b9a32b91dbb0d7b29a4e84a9b6760f5f1e05f226b836d83d1b89f8aba657d0e92647913de6c44883e961e63aeb6e5332d5f6690084c","ssdeep":"192:nBSvAN2a/PReOO5NmG8k3xSX2z2eN7YN7B5WeL375L19DgXTpU6F8xNwVCDklL9I:nBSvAN2a/PReOOJhUV75L1ep8V1D","tlshash":"a1a20da240f52a77414388d26a616f6b3fd2a107c92316407bfd47dd2fefc95c8632a9","dom_hash":"domhash7e3a140804c7435340d80a33de3eb207","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kraken-kra38.net","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T12:08:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-25","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kraken-kra38.net/fonts/src/Montserrat-Bold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-25","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kraken-kra38.net/fonts/src/Montserrat-Medium.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kraken-kra38.net","ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":50,"request_count":24,"received_data":837106,"sent_data":11163,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kraken-kra38.net/js/main.min.js","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14920ac4edfa43fcfd781f7ef980c018","sha1":"027cdbc6162c643dff80059b524d9575303133cd","sha256":"eb97b08bc9cdbaf14d6239082c2388ca46b3b3eff9501c5f2a8f3ebb1608965a","sha512":"ac2b5e1dc70545713502d3c760d2d645b4016cd6208d86b9a1ebee88bb8fe3a2753d92e615bdb7875f8107086276a7659db0880931e3b43b4542aa45c2b3e23f","ssdeep":"1536:+arTGcGMId6xDvGYdhsEy8XDpB37DfE4SR/NDIzQWEm1/qlqWsC/7ruXxSE:Nrny8XD7IR/2sWLssC/74xSE","tlshash":"afd32ccdf285726286e720e5105f840ef3b7a9687809c050b194d6da7c7ca4e92e7fbd","size":130770,"data":"","first_seen":"2025-02-26T16:20:03.490965Z","last_seen":"2026-04-25T12:08:31.548903Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kraken-kra38.net/favicon.ico","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:07.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdOrefhitNaqGXVOB%2Bnd%2BRsZWxDrRUd1n5LyfJBJqJGld6YYMAazcjD3%2BhM4CTgI1hxcmpXMrROM25Li2nQKH8mEBh5WQpi8Q9j5VG2vxphCmImT4%2B4ZfNx3u3VS89%2B2a0yM\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:20 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d0-47e\"\r\ncf-ray: 9f1d3b36dd75b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"3e0895adc4e70c1512435585ecdb1345","sha1":"e57dedbd19ae1380e6faa04ef1b72882a3f244ed","sha256":"9c162f15f4dee112234aca71ef7f557b85358ee20a5f40d08123048e7304e871","sha512":"81ae1c756e6780c0ce259037067ab0b888e37ec5c7685a5ad1e16df3f7504dd31cacdfcff4181b19f6149c0eba882089002bc9c1f0ea2a0d0fe73de93f082ecd","ssdeep":"","tlshash":"39217d8177420946c2d406f080c7d3f26e3a5c12d0f6010205d1be137e127442c1fda0","first_seen":"2024-03-08T16:36:11Z","last_seen":"2026-04-25T12:08:31.488789Z","times_seen":46,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T12:08:05.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 17:21:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AaBe1N%2F5jlAIplLBows%2B5SkFP0b%2FUYib9tnLNIDm85BjbNJsNVlJvxgylTJKCM3qWlgBUItCQh9eNFJ5ljVpYOcUteBdSG4%2B4Ea2TcmDnM7vACxFD3CXxq2DksHHsyFERv1e\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f1d3b2a1ea4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"849cd84c000e3482baff422364c8f4ef","sha1":"ad6e8d8eac7704ef63d992d32cde54688beddcae","sha256":"ac88669eb62e57ebde3f3410d707ce83c138b39e9a0d9efa302c39c3339a5c1e","sha512":"110d761911f5a2f0bc90b4dd904389033addae616411bfee89a5e8f142c8ebd670e8da174326a7d035075fd44697aa24ad4a94d2adc834c98dcbe8143811bf7f","ssdeep":"192:FVROO5N3lcG8k3xSX2z2eN7YN7Bcxe6575ri19S70fZU6F8FK:FXOOPlvhUm75ri15ft8M","tlshash":"2d62716255f676b3428394f26a602f2abf85900bd5671700b6fc87cc1feac95c93329d","first_seen":"2026-04-25T12:08:31.493182Z","last_seen":"2026-04-25T12:08:31.493182Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1279,"timings":{"blocked":50,"dns":29,"connect":1,"send":0,"wait":1178,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/css/style.min.css","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ianyHyw1yazxTADOcY1dJye2FgFvD7UbOhG96CV72GqipLoOyUsFSFBsEznFp9JBRqSSjWERIswS%2FJ1eDlaYUPj1HhdbDW8IRkaz5dNK7oztr74MaCE%2FT4e2U5ci39B0bfop\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5cf-3936\"\r\ncf-ray: 9f1d3b326d43b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14646,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14646), with no line terminators","md5":"f5aef1510144e1587224766e17f77eb6","sha1":"4d5e5f2c6232a373dc3a7e681729e3a52a04b35e","sha256":"8c7af4fc1adcfd80dfcaa87544e310c701fcaa3dbf15cf9316cc79642bf8cb39","sha512":"98c0ab92b529d4ec2a016890c3110268fafe466312181c33774d6729182a6ae14c9b9f82f1a2941fe7b2ed8f78ac8bccf683c12d784f12f27d82a256cdc2737c","ssdeep":"192:Fu5tcLJQgjFK6H72eqAn0fVf6/9cD9WJgD5i8osRkk4ktkRec/:Fu5t0dDliaai6r4IkReE","tlshash":"7e62842362143609e007e621ebc19be63158a027d43717fabd25572fcbeb69147b63ce","first_seen":"2026-04-25T12:08:31.497986Z","last_seen":"2026-04-25T12:08:31.497986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/logomini.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/logomini.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muDOMBzZ%2F3ysV7PsxQx%2Feh9sEiMFxXsbHk9h%2BwclxQH9Eljf%2BKDtcYNAygOxjqbYwk2gBnVKnYCNmjtKIZTYQs90j2lEI6hUZppfhFaB1yoiqD7zR59Yv4uOVVEjOULCWsNs\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-4a1\"\r\ncf-ray: 9f1d3b331d50b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e598ae5a67ca43f600b736377a762abf","sha1":"73aaeb668acc512c39cbcc11d5f93b25804decb5","sha256":"d91343a2ecec0d63451a53ef9d2edb529d71388353603dcece46980cfdb1b93c","sha512":"82c23b9494994f139749a9359d8e4baca0d421686f7873a1e4d60373b8c56ce73a245779495bcf344f18775d20ee7b9063280ffa65e22479a285785d72698271","ssdeep":"","tlshash":"a12121d14320d72ca5c8c4ceaf346951400b809e68fb95c8c9d72b24a44fdc6bf58964","first_seen":"2025-02-26T16:20:03.467727Z","last_seen":"2026-04-25T12:08:31.512713Z","times_seen":11,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/lineaba.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/lineaba.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yQBXG2ikfN2N8QT2RA4lTEBJw8t7Y%2FfdqMw8kXKCza%2BRurT9%2BvmP%2BPmfOjzpS97Rf8jZRKkiAPWOaqpAUKPQGuTOM3fn8Dh43KysYrEQy1PlWCS8KqAM21LSd2ilEfhqQBy\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-10f\"\r\ncf-ray: 9f1d3b332d53b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a37c6d3bbf71d7d34d7b157182d8c9de","sha1":"ec615fe8cc2e0e2cf1d6c939d3553a2a7f9a0c72","sha256":"69d6630d1936140555d5c6baa72607abca7cca0c98923297dff9e3e5655247e4","sha512":"99ff7b0330d0475e2084021659ce0aab0bc59d879e89d8e8d75606d11499092b80e5669a26ea263fabbe2129861c3a034ac0fa5725e5c0de5ba14e6babee78f0","ssdeep":"","tlshash":"b5d02bb59bcd4424ca189872732457e94363b5c6028c155cc59067687550ef628351dc","first_seen":"2025-06-23T03:18:35.731407Z","last_seen":"2026-04-25T12:08:31.51798Z","times_seen":10,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/linerevdesc.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/linerevdesc.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRhDDR%2FATqx1TeWYDFpbP54xKhkLPiKvNF83jE1FOC7egAH43fk4VeW0joAmyjvwWOge6VHXyNVAeJa8E52jMlaaYSXk4CaLSQkm9ogoc%2FilsldkXKjy2aul9PzxBpEs4RZs\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-2ad\"\r\ncf-ray: 9f1d3b333d57b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"389f9e6feb0d368709f2097238210b9e","sha1":"86427740c931830a389a0cc2f230017d7fd68213","sha256":"e3aa7865af9064981e5dbac29c54d7797ce01be42f44c3f52b1ea1760b0eebdc","sha512":"4980100fe75e6f355ed15d13f9feb06c0b5dab5f52723135f918084ed8b63d08b2614bf2d23d17795b526714eb5a5c6a82c1321298fd88e97f8246ee9c482060","ssdeep":"","tlshash":"36014ecd6ba46ab0ca2083b1c53645ad27cb60a3aa86738c42703f207202eec4c25ddd","first_seen":"2025-06-23T03:18:35.734289Z","last_seen":"2026-04-25T12:08:31.52405Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/fonts/src/Montserrat-Bold.woff2","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:07.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /fonts/src/Montserrat-Bold.woff2 HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 166380\r\nlast-modified: Sat, 20 Jul 2024 17:37:20 GMT\r\npriority: u=4,i=?0\r\netag: \"669bf5d0-289ec\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0foYM1036DY7EYR30ejcFIpgLSdp9SFRPEOzHxdMucxR3S5xZDXZOD3yk97q3bxNflBEt5b3RImSlvLCy%2BSnX0xhw4t9aiI%2BuWo8kjDj%2B1OjH9NV7Cy9symlDcB6H6PbXWSo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1d3b339d5cb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166380,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PostScript Type 1 font program data (Montserrat-Bold 7.200)","md5":"57066d9cc9b73e333c0ef9b386853f5c","sha1":"32cba25fd28af850f3943afbcaa05569ef8fa1e2","sha256":"6a12f5caab662d642b94f0c77ac3a08f8e26aa74ca418abd9d934c8ba20744d4","sha512":"331b6210ea01f5f2813e7c008037b893195c100a459b8cbc037595279651e09ba5299659f214bef3569512bae1a48c7fa4b81caba13dd6db868b741c3581990c","ssdeep":"3072:fNyNSa7DCOU5We4zrAMBSUWWbWwR2lLXs4TiNS5:fgNBCOU5WtXa8bzEiNS5","tlshash":"6af31264edcfdf28c85734d31fc376396b42f0a386e97d951ae2aa8e504012612f5de8","first_seen":"2025-02-26T16:20:03.465669Z","last_seen":"2026-04-25T12:08:31.531703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-25","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kraken-kra38.net/fonts/src/Montserrat-Bold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/browser.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/browser.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6Z1v%2B%2Bn1yzxpEzJa4nCOnPs448CIYYEvbVIjiZbcYUzh3ibCvFMqf7B31EctFZWAMW5endaXm0moFRYDdMNwtEAkFDm7iw3OO1Re05TmDNEPCtmIaIUxVUgDgQaj9qgfw2Z\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-408\"\r\ncf-ray: 9f1d3b326d45b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4325cd0f0b3fe1365a86da82e252132","sha1":"3c62120adafbea4f84c7a4b82311ebc6edefb5e3","sha256":"1624d77ba79e8c3aed4b75424769352650b0814158c2308cc7c87c9ba5cae6dd","sha512":"9df1384dc92afa5448374e4ceeafd9431a3046d115cea70a58ecdf55327ad2786ae3cdcf4ed32b7ef6d96251264b821dccd78090b923ee5177eb88ac20aadc2f","ssdeep":"","tlshash":"7f11efa1ce3080d488d99935ef7a2f436ddbf9fb896052d56cc6a70c34639519941d05","first_seen":"2025-06-23T03:18:35.694967Z","last_seen":"2026-04-25T12:08:31.534183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/tor.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/tor.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yirkAdli4NGjIHsf%2FcVPLDJDbORVAATYfw9%2FO5DtNbuCSmwQZ%2FmeLuo5Y2UxRskVBsiVB6TfJpUBfQTpc99KXClwTtuj%2BonKVb30QIPj4JwOyD1jh9Xx0s6tyw%2FIPzGRLQVv\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-56d\"\r\ncf-ray: 9f1d3b326d46b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef862066f69dafde9b28387c4aa724d2","sha1":"587a2cac03842a0327f53ac48097bcd1e7f7b163","sha256":"7976efa228c47a1f75718fa56cad422cf04a3d23011ccc74af2a44a1f517efde","sha512":"58cbdb826cdae798628cca2cc907280aea4f709f0bac3ced4f63dfff43528b7c8e9c220b5ab70d2d2e18d65a9069674fe99504119688ffaad2d44aab04e56373","ssdeep":"","tlshash":"0c2112eb2660e348559a6a2eef76ad04e00bf16e386741c4976997489443c89ee08c20","first_seen":"2025-06-23T03:18:35.741181Z","last_seen":"2026-04-25T12:08:31.538517Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/firstchange.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/firstchange.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CiqVf3ZcDQ3mibOzRLmZbz%2B8Ij67rIrQcVaT%2FSwkl4nMAXVZg8hNp2W9EJfO0HYVMfoVVngZbBviO296ZWh622gv9e7YqoafyDG%2BxxiKUceboGhXrvhHS5PbCXylgFd5slI8\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-13c3\"\r\ncf-ray: 9f1d3b326d47b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98c85621984271be605a0668bb9a3e7a","sha1":"dbd47272fa9ffd4f88dc158bccbe190c0a05ab5e","sha256":"37c5f69965952656362f6eae3dcda04bc8b0599ac8b60130aad0c3552b32bf76","sha512":"d412467a96c1a11785c2a659e5d625e614e2644512eced79d69fbf7a071b9f36e168fcaf33d3c094e009ded5a39fb20e31d88e01a7ae03953589b80396679c2e","ssdeep":"96:UKQhRZjP4SKIHlDA4qwd7dMrdM0epG/AeNOwvJA3wC/5djSql+JAiwoJsoGNAOxc:5QtF2H3e5pG/AeMKA3rRd+dAi5s/AIo","tlshash":"e3a132c0333081dcf9489be86f68a47868fd31f571b6dc875d1e8b0ce95a98af545e08","first_seen":"2025-06-23T03:18:35.727499Z","last_seen":"2026-04-25T12:08:31.540213Z","times_seen":10,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/js/main.min.js","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /js/main.min.js HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHEWpewjFIc3at6iFV9EiC%2BXWDkiZh6iEGPwhxRqFN7TzowPFXr0NhkJrzBDVagIBpmXoMRt9aPK3CnU5gfffHdqspAscxWVSDKmXO4DphcJa%2BSUGYKTvpdMq%2BAlhLuBo4Vl\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d3-1fed2\"\r\ncf-ray: 9f1d3b327d4cb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130770,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65316)","md5":"14920ac4edfa43fcfd781f7ef980c018","sha1":"027cdbc6162c643dff80059b524d9575303133cd","sha256":"eb97b08bc9cdbaf14d6239082c2388ca46b3b3eff9501c5f2a8f3ebb1608965a","sha512":"ac2b5e1dc70545713502d3c760d2d645b4016cd6208d86b9a1ebee88bb8fe3a2753d92e615bdb7875f8107086276a7659db0880931e3b43b4542aa45c2b3e23f","ssdeep":"1536:+arTGcGMId6xDvGYdhsEy8XDpB37DfE4SR/NDIzQWEm1/qlqWsC/7ruXxSE:Nrny8XD7IR/2sWLssC/74xSE","tlshash":"afd32ccdf285726286e720e5105f840ef3b7a9687809c050b194d6da7c7ca4e92e7fbd","first_seen":"2025-02-26T16:20:03.490965Z","last_seen":"2026-04-25T12:08:31.548903Z","times_seen":12,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/webweb.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/webweb.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abBpENWi2KRu5yb%2FsqpQQzBKHapBzyD1BNCLQwYXFuQp9Yt93%2FS%2Fbp4OPk1wz8%2BG%2BpkSInu%2BdZIerHB0Tjqp7b47yycBMOq9Dli9TPJkDymcuB9fN7F9nvHQY%2FVVr69NRB0s\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-b28\"\r\ncf-ray: 9f1d3b331d52b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8926a4f8a54d08defe01a7ea1de7ee2b","sha1":"9400b2bc5cfd0de5f6e4abe5889c786c7aaf8684","sha256":"87d317182008b0a5b9e5a2308b5c3aafd1939ac49ec82ebc44089d252818a43b","sha512":"969b8242c1e91c6950712f8786ea1c3b2bb62f2e45553089d4db2c263637f387817034cf8375f35ab784565281d8458e9ae22b547d1b6c7d43ee057db17ef73c","ssdeep":"","tlshash":"1c5198dd6b20d3b4a7cac3ecef21f9e8250a707d8b7313844059572d24965ba7526cd4","first_seen":"2025-06-23T03:18:35.710772Z","last_seen":"2026-04-25T12:08:31.550376Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/fonts/src/Montserrat-Medium.woff2","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /fonts/src/Montserrat-Medium.woff2 HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 164676\r\nlast-modified: Sat, 20 Jul 2024 17:37:20 GMT\r\npriority: u=4,i=?0\r\netag: \"669bf5d0-28344\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jT%2FGv2gJbmmEanGhGOcVf%2BaFJ%2FKxAwBkWj4OmWLlHkzV5ag7vY9emNK3OWHuhig8C8BNbANSpcoVoGdsWc%2FcgD3GQ%2BJlLGzdxZsF9QCFzr7UyOxoEov96M6%2BQg419CCasgsV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1d3b336d5ab4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PostScript Type 1 font program data (Montserrat-Medium 7.200)","md5":"60216bd9e225cc91488d3cb5d66273b4","sha1":"53c9aaec495027c399f594fae920dfadbf0b4d7c","sha256":"c931bec6411f69efc7918618db6fbda2141695c471603c9ba2d561299e4ca3c7","sha512":"9674c50f355d27c1c4c6aef0401517d5deb40555cdcb951cbdc9a2067fc740870290961fc80e12926e7e18826e8f78249c787a55413a8b882436d87a2dee98f5","ssdeep":"3072:Jqm4A8eu/N0SQtefvbQVf7n1Jv2FOyw0xf2AeX3EF9mYZg2fsXz:Jgr/N0Xyvuf7n1J2dw0xOvemYrO","tlshash":"c0f31238cadf9701c9137ee744c33575839af1968ad39e09c2198c5a261e3a471fd3da","first_seen":"2025-02-26T16:20:03.466752Z","last_seen":"2026-04-25T12:08:31.553668Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-25","alert":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","trigger":"kraken-kra38.net/fonts/src/Montserrat-Medium.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Eoin Wickens - Eoin@HiddenLayer.com","date":"2022-09-16","description":"Detects Pickle files with dangerous c_builtins or non standard module imports. These are indicators of possible malicious intent","rule":"PickleOrNot","yarahub_license":"CC0 1.0","yarahub_reference_md5":"81e132b5437b902040dd72fb0c62f7dc","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"dd704c93-e88d-4327-9e79-a20c7260bb3a"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/fonts/src/DrukTextWideMedium.woff2","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /fonts/src/DrukTextWideMedium.woff2 HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16468\r\nlast-modified: Sat, 20 Jul 2024 17:37:20 GMT\r\npriority: u=4,i=?0\r\netag: \"669bf5d0-4054\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bg7NfHUVScHihKmMyrM6DdqnLIyMzw1trxNI8XLMeEp%2FEKCReF2iBP4YjicfC7w4fTb024Gdf4auqPXLlwFkVOYHISrlcd0UNEcT8lgSQwMxu2PtVe4PIlcdJ394c1fg7gE5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1d3b338d5bb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16468,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16468, version 1.0","md5":"07fe8a616b5f004a1740a389e376ed80","sha1":"03636e797c3ba2fb93638274467967bb9c00d7a3","sha256":"59dc16b8b7701cdba03c04a911b4ea3c930bcc821c0743d0e24d949c031542ff","sha512":"3b76cfedaf26965a4d6eeaeac0cd649a73622bc78a738d9268f614b8c127834aab04ced691b98ce4f39e06ab4eeea288c160e402af5192f637d0fe57fd85ef38","ssdeep":"384:oeo5vQfeL3uVN2u0LSxme1fDKFmogzFtePDKt1:oLNQfs827WxmeRimBr6G","tlshash":"4172d02cf807bae057354279ac90d319525f5be347b98dc399cd26b31c8a93e04931d6","first_seen":"2024-03-08T16:36:11Z","last_seen":"2026-04-30T14:57:30.037013Z","times_seen":19,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/shopcart.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/shopcart.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uC8dWI3I1%2BfBjXOCP3rhjhsNvaGLZaaTX%2FiNcAb5v0VqhXEI0p7KJubyaPpw2%2FSXZnHMqKrM1FeM4OnMZcTpdw3ldDC7ukb%2B1DF703jIb%2BdEBMHYMQoBKzpqpGpOIJoKBgmm\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-10d8\"\r\ncf-ray: 9f1d3b327d49b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24430bf9f074c31614c414b3e7aa3c03","sha1":"17566384a1aaffe541bb882f453fe689f109a05f","sha256":"352c74384a88a21c45a9a36324405de68be56cec3082ac175f54e4bcfa439ebd","sha512":"bc639562261b832a092a8ad2f6ae8266be87b736a865589b0361fb4c9b73410940958f35b18d1bb51447724258efbb029d65e941e42795d7fd66796e9fbd3f23","ssdeep":"96:0NH5nNgm5w0B5iiziJ3LEw+MFBQaGUOBWS97hqV+M9uBqCKy1s9FVVIw:0NH56m2SiMu74GByUOllhqAM9bCKy1YN","tlshash":"a69195c16730e388a9c6c4aeef34ade8610ba0fedf7aa5c4427e550194eb8c6f408c14","first_seen":"2025-06-23T03:18:35.697216Z","last_seen":"2026-04-25T12:08:31.557285Z","times_seen":10,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/zvezd.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/zvezd.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7kNS7C6vrQbTANv70DAwTTNhoqjHcL8SsqPav3gWgLLK2VlvTYt6EB1nXdlxy3UYC%2BShY0WGOEC9A1l3kfzKZDOUG3UVJExR1KGsz5fpf1uAPfESOiY6auF8A9uVCci3Bdw\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-1b6\"\r\ncf-ray: 9f1d3b331d51b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a25130ba44d370a2eca5e9c7c98413a","sha1":"28341a17564d400652715ce6caae96ce84b2358c","sha256":"fc211949148901818d781bce6ecedb362813baee832145c698b4b5062f9a1aa2","sha512":"0759912812ff91542198a93a3e8e273801b80b07bd32a25f580c531e633e1ec052ed5b1060eb8e4e5cd07d724d210739dc33221f4d11c8b396bf2a03d7f30a01","ssdeep":"","tlshash":"6cf0d5fa6710b2b810a84ba8e33c88b43a2730be8a41c0c8c10807083042caa2a378c8","first_seen":"2025-06-23T03:18:35.742375Z","last_seen":"2026-04-25T12:08:31.561437Z","times_seen":10,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/line.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/line.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5jG0ORR5O9P0Y5g2BCQaQS5jb92uv7wlohLIUIS6sXPy7%2F8NzuQnTQ5TyBs2DhRqk1z%2BuE1ijArA%2FPpn0gH648GdLu6u7nKoiMs8IBvBP17AjwXQQ776dy2ADXxr1CbjQqR\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-10d7\"\r\ncf-ray: 9f1d3b332d54b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4311,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3ad497edff5b4e08d340f4b9aabbcd4","sha1":"dda24c313144425906f0031a43bfa15b2284c330","sha256":"29b7f4d6f72929e1163ce6a2441a726f03a3d793526b366c499cba46aa0e61dc","sha512":"c226582d72132042b01ed9f070c9f285222c5f48621512db08210305b1fa8b3b2e8ff46539853fd7cbb43f3991064ece62b32a865d350cd91afc9f6e941d8059","ssdeep":"96:jKCrzFk6abCzb37dAIMjXKbJpGSt1XxMPN+M5zfRJU4CAElLHLU:jdk66CzbqIMjXKbJpzZxMPr5z5TCntHo","tlshash":"d791c5cc672083e48fca868def50fdec011b707edf3a90c4959d474ca49baadb826584","first_seen":"2025-06-23T03:18:35.712699Z","last_seen":"2026-04-25T12:08:31.563664Z","times_seen":10,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/arrowdown.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/arrowdown.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7swUypLnrzwJoyPZPEDRdvCgsmsBVAa6dkeOyvQ4Wng3ilWS42gYoaa9uQeU6kCV3c6QQw9Gl8SORjYw45h7WyYfjC4kqFlEzId2I6ec6W9slFELS0i7zDqVMbc%2Bo6OT8NrV\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-2c0\"\r\ncf-ray: 9f1d3b332d56b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b58158676956cea63c73675d37ebd5c1","sha1":"fdd024109bc68aca25be8cdf938b663af97001a9","sha256":"3169390c2b57e069ec432b544cc0429b611cf7bc9d7df9bf21699b16518e0b5e","sha512":"e639a17eba34f3331d09acd5739a0394e98c4c21caec609b8936b9d2405e3093eb2ff4a0c8157b88c658b5b96d52748103e1e65a95800061e0dbd18e7f5ba145","ssdeep":"","tlshash":"e10197689c386b284dde2d42ef3b68c6310db2ea07bf4ba8405cbb193597cd87c04808","first_seen":"2025-06-23T03:18:35.708505Z","last_seen":"2026-04-25T12:08:31.567409Z","times_seen":10,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/fonts/src/Montserrat-Medium.woff","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:07.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /fonts/src/Montserrat-Medium.woff HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 139304\r\nlast-modified: Sat, 20 Jul 2024 17:37:20 GMT\r\npriority: u=4,i=?0\r\netag: \"669bf5d0-22028\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3mcX6Wfs7ekWQUZe8Yqfht7jQolYetHHirTGnO%2BntmXW51LD4l2NHqPnV1Bw0aLA%2F7N39Q7LVJj0d6wC9HHHqCMrqzc2UcxOLFl0YGc4iJK1qdbTbZCPSlqHcIKPRgn8ima\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1d3b34cd65b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139304,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 139304, version 7.200","md5":"229a05de5edb6e0da668f11634f03ee9","sha1":"fc1c761c785c0aa739f6ece90999641331941f68","sha256":"aabf1e7790c4a39f25912705a3559a3b95de23a6b0e213bfc8967aab9e6439f8","sha512":"b84071fc08cf307273671072b986874929c4ebd9aefea26f3158082eae5a21a5e351dc0290d43571414b6a191980f03afac65cb4663189cb795081f0128cc76f","ssdeep":"3072:XW/4j9N+W7soUT0+Kwhmq9qDvfsfnJe4k6Qw71Z9fo:dD7DUXK6vuvfsf84PQIw","tlshash":"03d312b193b1669eb1bc94701d3513fb82d1240337219e8255ecaaa4379fed36cf262d","first_seen":"2025-02-26T16:20:03.469949Z","last_seen":"2026-04-25T12:08:31.569428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/fonts/src/Montserrat-Bold.woff","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:07.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /fonts/src/Montserrat-Bold.woff HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 139644\r\nlast-modified: Sat, 20 Jul 2024 17:37:20 GMT\r\npriority: u=4,i=?0\r\netag: \"669bf5d0-2217c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9Elnj3gEfcI75Oi7RfeSomfetJANcOqwEuE3Myy%2BaMc7h%2BrQilLEEvCBHkQJcJwfI3XGNJtLDtCpLpOha8zs%2BAT1hawFOphJ63dRGMG6L94aurdm6p4rllzW7zacM%2BPHKTh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1d3b356d67b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139644,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 139644, version 7.200","md5":"e7b439f50720ae72a0631c24b4032ce8","sha1":"26fb2bcc1d8dda5c9a83a5fe9ba365a8cded17d6","sha256":"b5c534fd58d5d5f6ec6ea87c2fc899c7d4fc52813af00a970b1a3b1bb811fb87","sha512":"99eea6197ed3afca26ca6ffa974abb9ebd8ad95da7cdb79dd636a39809c86d1cec4cc76c874bc1f58ec91924cb4f851b03f5f4ef24d7d97f9cba7f50aac6ebca","ssdeep":"3072:AxDtVNh+Kd5eOqa+LJRTq9qD7x5LE4y2uY6sUlX:uhLd4BXsu7n5PT6HR","tlshash":"16d3126acab8de8b30c5f434193c1a940d8b7d256ba9515c40ee33d9eb065e6fdcc239","first_seen":"2025-02-26T16:20:03.487193Z","last_seen":"2026-04-25T12:08:31.572959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/arrowrigth.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/arrowrigth.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:07 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igU%2BrB0fnObJRZa7ty9sc5rOxc6p9Jo10ki%2FF%2Fwv2Uzm5CW1A1t24ug1htRtSPjQRDKHKx13wrRVTKBMdi3T6gMHZ2xF55mZOlt2wbHr64Z1%2BmLgvmvkay24KC7Zlhgcc0t3\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-a3\"\r\ncf-ray: 9f1d3b332d55b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9039c99e715a56947a805e7d557f7023","sha1":"af93c43eae292bfa966636349936e25b8aff48ea","sha256":"d9200bc35e96fdc1df9966cd59ceef979aecdd00b5916994eabe4f0fddad3559","sha512":"35e54a679af7af1eb2a17ddaec25bde5ac73993e7065f4c4890df3aff76f0dc656b5716937f749f1d361bc52ed5781372ea125f4f7850a5b3aae8d00c1845d59","ssdeep":"","tlshash":"a8c08c6882486a16eb188220b72875e549a73082f65d10cae89462387212abb28732ac","first_seen":"2025-06-23T03:18:35.732872Z","last_seen":"2026-04-25T12:08:31.573881Z","times_seen":10,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/logo.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/logo.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DpCnuiTWbtbpv0QKUOGXYQPfw%2FRnW46YzYliGNmGdnJwsWwgOj0jNLbYogCT%2FZSH2yyS05FyEHAkRnhEP%2BG%2BI7SUfYuietiCLcSNoSUpGDdsnAvKq%2FsvkGksXYSE60QU4%2FZ\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-51e\"\r\ncf-ray: 9f1d3b326d44b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a4849ed3b8ba9849b0a12e2f4069f8c","sha1":"b1a649d8548ce7dc0478d13388c215d06dc5563a","sha256":"6c660122ad45aaf24dbd77a6b21a0d08e36a81427532cf47bf1b5770f3a59ab1","sha512":"7a97a6d5f0aed1dfd78a3e452206f27d0e1e1b748178d3fb180f278a0aa9f1ab50c4dc7b15e94eaa0419fd7cb07862c64e1c99fc02dc4da1c93734a448467bd3","ssdeep":"","tlshash":"042165c95a5457c85acfc5aaff2da82c8849b8bd3aad5dc590d5d9055068cc9f708c80","first_seen":"2025-06-23T03:18:35.719666Z","last_seen":"2026-04-25T12:08:31.576332Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/support.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/support.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nc2hFLSF60YqUf26PctfU0%2FokCtnu3oKVe1DOgwHOvEGx760Y%2Bid%2FYrGeeKOTgQZJ244bbSitkc3W4%2FEjmLO16C57so6tkeJ%2BMM1kgtjbvr0OagC7FMbih%2B3Y8BQI0mSIcap\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-178f\"\r\ncf-ray: 9f1d3b327d4ab4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6031,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f905b5984c124f608d806a72d005ad1","sha1":"f2c707614d85358f5ecdc07cb8f859a15e9d0674","sha256":"945f42a0b05cedfc2057b661bcbcbe3737e6c3b2f679476cb2065dc2f075d053","sha512":"137f1538644175bd8c4ca23ec018f96ad880a4b75c4d25cd6e9d7d9c552abf6a58aa34f55e1afaa8be96030d4cab11a0c2c7483641eb185adda23d5cb6db9902","ssdeep":"96:f/+Ly4mpU08xqctlxnwUgv+PeUxPdnfwFvMYn2LhXQjDAuf:3B0Ntnpe4dnfwqndCDHf","tlshash":"1ac195db1b3093e814cacb7edf291298a42ee4fda3a1568d86707e39d993cd5f508510","first_seen":"2025-06-23T03:18:35.702376Z","last_seen":"2026-04-25T12:08:31.578434Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-kra38.net/img/dist/user.svg","fqdn":"kraken-kra38.net","domain":"kraken-kra38.net","tld":"net"},"ip":{"addr":"172.67.152.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-kra38.net/","date":"2026-04-25T12:08:06.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-kra38.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 05:52:34 GMT","end":"Tue, 09 Jun 2026 06:51:14 GMT"},"fingerprint":{"sha1":"D9:59:AE:63:00:6B:7D:7B:5C:F8:DC:49:20:A8:5A:61:00:75:9D:1E","sha256":"43:88:E7:6A:BD:79:69:89:11:45:BB:89:4C:8E:FD:06:1E:D1:1C:33:E4:4E:88:D0:D4:BE:09:A6:0B:7D:F0:AF"}}},"request":{"raw":"GET /img/dist/user.svg HTTP/1.1\r\nHost: kraken-kra38.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-kra38.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:08:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrDRtVGYgZ62duTiqO8d4HekO3ZjNAgrXAJ4XuVUJZOcSoi%2Fx0%2BvqbkAlUzqEWz8Zu%2FJP%2FqwNtYcuUMeC9chordNDusLDjsCq2%2BQEzL%2FcY6vj%2FzAQp%2F5Z1akHRv%2FD%2FWp7dCi\"}]}\r\nlast-modified: Sat, 20 Jul 2024 17:37:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"669bf5d1-a4e\"\r\ncf-ray: 9f1d3b327d4bb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7df89e03986af3f5b19d46dc79f2f7f8","sha1":"528ca68dc8cf048ef6e90f0f86efbdcd2515638c","sha256":"c7e0ec87f6d154a37d236a47de5ce40ba2e200cd7938ea4365b5bb6b82f15871","sha512":"db9bc23038517f7fa3f256232a94451e89726dd40dedcd9edaddcef8bc858686e146afe97aa1dcf41eb83fe5eb3769e07fa0665ec919eab8c503b3b97c78eaa2","ssdeep":"","tlshash":"895153d36b31f184eacfa91ecf0a90f1695834f5dfa190c9cabd2e1494979d7d501e40","first_seen":"2025-06-23T03:18:35.738465Z","last_seen":"2026-04-25T12:08:31.580082Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"kraken-kra38.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}