{"report_id":"9e2eeba0-7c80-4a2b-9f00-929a4e8b3539","version":6,"status":"done","tags":[],"date":"2025-06-27T14:25:39Z","url":{"schema":"http","addr":"kra---32-cc.top/","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"kra---32-cc.top/","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"title":"kra32 cc - Вход по ссылке"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T14:25:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"kra---32-cc.top","ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2025-06-23","domain_rank":0,"first_seen":"2025-06-27T14:25:39.864081Z","last_seen":"2025-06-27T14:25:39.864081Z","alert_count":7,"request_count":7,"received_data":133321,"sent_data":3105,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kra---32-cc.top/","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8b971d68f3890f02688a0d9d853e923","sha1":"03a562fc7eca23a627ee3dc78a3e836614e0a9fa","sha256":"4abc47553525f79fa40a8924e797cd4ea0fb6346016f0f16f68368ec0acad90e","sha512":"a2a734d62949fd931d86b6475f7805173f167286913d9e2edf44dee28835c4abf88374fc3f5c54c485f7c5fa961b360a7acae438cff9ad2b2fb528b232d192f6","ssdeep":"","tlshash":"08f00e953cd940244373012527bb9148b43979392c4aed14f94c84812f99ea808bb90c","size":515,"data":"","first_seen":"2025-06-27T14:25:42.768704Z","last_seen":"2025-06-27T14:25:42.768704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7990eff4acbffbec0dbaa15d76d6bf90","sha1":"0d3f0687d29e815900c5577e1e0eddfd960d3d1c","sha256":"79b23fa4b2b7110b9ec423c0c6ff71ed30a03553520b4b6c92d971b350bef733","sha512":"0a1e949e32f7a85a86b2eb97bee1aca307894a018de87f4255356dad447faeb71133321a90fcb80ef9a46a961991418fdd40183a6a707976df3f17d19c3fd36e","ssdeep":"","tlshash":"74c08c100d32c034421708972332c26121a0201aa411e08976ccdd8d2f20fc54c02c18","size":164,"data":"","first_seen":"2025-06-27T14:25:42.770305Z","last_seen":"2026-02-03T08:21:52.163924Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecd5a13a79774a38196700959a23ef42","sha1":"7f31ec0f065e55dbf82d189f5ddd98a0abddd5bd","sha256":"e8e031ac1b0291080c07f52f6af233709a2ef062f6adfb97fbb5797d4595de0b","sha512":"0b5ddbdc8939c2bc855cfd5f4069f10794e7e5d5096adc1d48329bcad901fdc6883684d3dc1f4940c265a94cec1d43bf42a538e06b3e09e45cee5dff24e1833f","ssdeep":"","tlshash":"90f01c3769b62443686621177baf1448a0549203fc04db8c7f0c96988f7ab9ce47af95","size":565,"data":"","first_seen":"2025-06-27T14:25:42.772092Z","last_seen":"2025-11-15T11:43:02.31978Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/script.js?v=1751034318778","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b8300899795aea3b103a6ee0e603a87","sha1":"71392604d42f7d6f1ad4a0bb1379eee6c2fa45d2","sha256":"d5d50fbf0d8bbed4a68a7a3d5549f88dd9caa6bac8891dd7cd3284871d84e6cc","sha512":"bc3c497216a10b9d9ab7502ab1e630a788e4c9949e48c4e95f1440c951f9017880fa27a51e5d521cd190c6439f116e0c0e0f92d5e022619547e8260f81e6bc8a","ssdeep":"","tlshash":"1e11dc3625b26ce9109574bb9e4ca64cb5bb00ff3d4f232039781da86db02b54368e5e","size":898,"data":"","first_seen":"2025-06-27T14:25:42.761622Z","last_seen":"2025-06-27T14:25:42.761622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kra---32-cc.top/favicon.ico","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kra---32-cc.top/","date":"2025-06-27T14:25:18.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra---32-cc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 101392\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Jun 2025 01:29:48 GMT\r\nETag: \"18c10-6384743984ed2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101392,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/images/5.png","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kra---32-cc.top/","date":"2025-06-27T14:25:18.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET /images/5.png HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra---32-cc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 10703\r\nLast-Modified: Tue, 24 Jun 2025 01:29:48 GMT\r\nConnection: keep-alive\r\nETag: \"6859ff8c-29cf\"\r\nExpires: Sat, 28 Jun 2025 14:25:18 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10703,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/14 23:14:50\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"4f05ca1121da273c532760ed96fbcbf3","sha1":"f347511b6d0603456191ef65e33c99f30e0fd8d7","sha256":"4fa6676ec9626c56faff6612b36af37f60f364a5cc2485e74da84b4ad2156f10","sha512":"2f37d053793b0ef40b7dd5c177dd085569626ce3d7938d1e3590c864fcb69d3fe90819fe60907b3994b3703dc5d48519236de62efb3032f3cc4385b58915c72c","ssdeep":"192:KSsyiF25Senrh4kXAG8JbVpZUMi8g5dRLJh2UPknl6Fu:KpyiTent46l8JB9Cd5Jh2UPyYFu","tlshash":"b522d00cf5ba6380cb6aec7686bdf633fad16db0fbd9444615db01af308c9060790586","first_seen":"2025-06-27T14:25:42.757693Z","last_seen":"2026-02-22T18:56:49.593757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-27T14:25:17.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3622,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"571af83c49e1a42ad6d711f7434cc79c","sha1":"52b8ea11ac65da6b9b70fa3a7253d3237fee7ecb","sha256":"5a82e8acc129dc0ab9c1dc2a64b3d1ebee5661efe17b18b060c5f6295ec7bd04","sha512":"bdd6951eeebc5485fca715d52c6352a7281f34f887cdd38cc637985f2cfc7ad7164013c019b33fe4a2e86f1aee75772fa0040a77131a6a360ba464c86c12d8a8","ssdeep":"","tlshash":"a87175721cf6442611121016fae7bd08ac68d63fb80cce58b58c88d92fd2bd8c86be4c","first_seen":"2025-06-27T14:25:42.759834Z","last_seen":"2025-06-27T14:25:42.759834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":1038,"dns":1008,"connect":8,"send":0,"wait":13,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/script.js?v=1751034318778","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kra---32-cc.top/","date":"2025-06-27T14:25:18.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET /script.js?v=1751034318778 HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra---32-cc.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 24 Jun 2025 01:29:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6859ff91-382\"\r\nExpires: Sat, 28 Jun 2025 14:25:18 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":898,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"5b8300899795aea3b103a6ee0e603a87","sha1":"71392604d42f7d6f1ad4a0bb1379eee6c2fa45d2","sha256":"d5d50fbf0d8bbed4a68a7a3d5549f88dd9caa6bac8891dd7cd3284871d84e6cc","sha512":"bc3c497216a10b9d9ab7502ab1e630a788e4c9949e48c4e95f1440c951f9017880fa27a51e5d521cd190c6439f116e0c0e0f92d5e022619547e8260f81e6bc8a","ssdeep":"","tlshash":"1e11dc3625b26ce9109574bb9e4ca64cb5bb00ff3d4f232039781da86db02b54368e5e","first_seen":"2025-06-27T14:25:42.761622Z","last_seen":"2025-06-27T14:25:42.761622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/images/1.png","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kra---32-cc.top/","date":"2025-06-27T14:25:18.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET /images/1.png HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra---32-cc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 11717\r\nLast-Modified: Tue, 24 Jun 2025 01:29:48 GMT\r\nConnection: keep-alive\r\nETag: \"6859ff8c-2dc5\"\r\nExpires: Sat, 28 Jun 2025 14:25:18 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11717,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/15 01:37:05\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"5f8b4f2b6dbf5798dc35b7a6c31f822a","sha1":"d38fc55a37e56a6cdc3157f434191d43e2c66add","sha256":"d5c9542789cd43113a9efd469f7d474f4f54bf7006de7e32dab33ed563024d17","sha512":"16835a0525fecbab43d5c2f09e8439eae536c0fc6a18834a12d2c8066208f1c5601b0f55239d10400a56fe62ec84b4d4aa8348cd4d0b9baaf52d0699529e639e","ssdeep":"192:/syaxJ9eGVjOjUPY9tsTovGSbsiTazLPvVZrnoDl38XLBxtAQg2W:kyifeGsUAfswGmsiTsrDrnoB8XHY","tlshash":"a932c011d3e3eb2794bfc975c5cc4542c37e2c41b05811af27e95a0eb0c6baa768de0a","first_seen":"2025-06-27T14:25:42.763406Z","last_seen":"2025-11-27T16:08:04.683101Z","times_seen":33,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/css2?family=Roboto\u0026display=swap","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kra---32-cc.top/","date":"2025-06-27T14:25:18.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET /css2?family=Roboto\u0026display=swap HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra---32-cc.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":277,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8be362388519c4c2c25bb0f53445d02d","sha1":"0fbc16e2017c3a9fb7b88a83139e6040e814a9a3","sha256":"322dcfc738f3bd83d7c1f7baf06f131ba1061e3c3aaa22373ccef3f4f9a4c8b8","sha512":"dfd37e59cbbcbea32d9e10be0e6811970cfc6cee5104d569b54af19eff42f09ba006f30bb67afef2e07a4b7d9b7ee0aa6f501770da77956e8d7ab95dcaa663df","ssdeep":"","tlshash":"05d02b9e9043b287485214a039c165d7264d12f6a47a42a83dc6d587529867ecd9bacc","first_seen":"2025-06-27T14:25:42.76524Z","last_seen":"2025-06-27T14:25:42.76524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra---32-cc.top/style.css","fqdn":"kra---32-cc.top","domain":"kra---32-cc.top","tld":"top"},"ip":{"addr":"193.105.134.22","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kra---32-cc.top/","date":"2025-06-27T14:25:18.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra---32-cc.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 00:25:04 GMT","end":"Mon, 22 Sep 2025 00:25:03 GMT"},"fingerprint":{"sha1":"FF:58:68:97:46:64:14:07:A6:F3:16:B0:FC:69:CA:21:F9:86:17:6F","sha256":"B3:02:A1:EE:0E:B3:82:2A:D2:34:F1:23:E2:56:6C:16:C5:6D:3B:EA:A7:17:6C:C7:8C:6A:0A:98:19:B3:1E:D4"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: kra---32-cc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra---32-cc.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Jun 2025 14:25:18 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 24 Jun 2025 01:29:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6859ff8c-af3\"\r\nExpires: Sat, 28 Jun 2025 14:25:18 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2803,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c7e26cffbb79840f855ac4ac92194244","sha1":"043386986a0129082de376fed38ca8c9bfe9d3f8","sha256":"06cfba78d9ccaf9119313ca3fd412c8c6daa1dc74c570e91eb3025c9873213d9","sha512":"674b973046cbe8c7ea13233c0f5994ca2abd55c899c55ed92a2a95fe47b78eec337f3b79cab89c2bd0c01d3daa80e7841e655c2862411da228e192f342a7495e","ssdeep":"","tlshash":"6151ba925e5b08677902e07c7fba4705265dc177834dcebd3e9c62588fc639488a17a8","first_seen":"2025-06-27T14:25:42.767043Z","last_seen":"2025-07-21T20:40:01.622377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":23,"dns":2,"connect":8,"send":0,"wait":8,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-27","alert":"Sinkholed","trigger":"kra---32-cc.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}