{"report_id":"a3d0e378-b8b3-46e1-8af4-377f8e7fff87","version":0,"status":"done","tags":["suspicious"],"date":"2026-07-12T19:42:53Z","url":{"schema":"https","addr":"krkahrtickets.com/","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krkahrtickets.com/","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"title":"NP Krka - Javna ustanova \"Nacionalni park Krka\"","dom":{"size":42651,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14199), with CR, LF line terminators","md5":"7d8f19e54435223ee31cdafcdd0ae9ce","sha1":"e8a5f9237055605bc2eb57cc301f2534cc452710","sha256":"8d506462647ba4adff1b16fd92cb1a8af6def84306906f0bab2c3a609385fd3f","sha512":"529a4d878796a996b9ce9e09d6f6bc47f40b519db6581bb9773e000dd4f07963c38b8e0b3195bdc94b4cce4328d1e020c81000168001b98a92c3e9c9920efa73","ssdeep":"384:1CTQzbe3N94yKhtKsLKaCK7FK7Wbm6oZhxec7hIjvE7N/XiEJDmFSr+FR:OQXiQyunKyJbahvhILE7NvOFTFR","tlshash":"2813d62471012e3b3d035ea1a69cab2dd02fe185d997594cbbfd400a1bc6fd98fb2355","dom_hash":"domhashf4419f4aaaf70ca82dc3fa0b359530f5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krkahrtickets.com/","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:42:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-12","alert":"Detects file containing Telegram Bot API","trigger":"krkahrtickets.com/static/js/main.06e347ea.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"krkahrtickets.com","ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-04","domain_rank":0,"first_seen":"2026-07-10T09:37:34.424575Z","last_seen":"2026-07-10T09:37:34.424575Z","alert_count":59,"request_count":57,"received_data":29357830,"sent_data":29471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"rezervtemka.cc","ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2025-12-15T12:38:06.57368Z","last_seen":"2026-07-10T09:37:35.042154Z","alert_count":0,"request_count":1,"received_data":815,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"krkahrtickets.com/","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46bccc4db235b1688253ac8b1d497768","sha1":"0f612f71e411cf18de9c60f8d5432a6b24f52d77","sha256":"252e0677f7c9f4f0004b9199214013c748c8d68640ccd0f91d52a62a60c31288","sha512":"1dcdbf49bd4a2277aa07f43557d730c4824ac7a8a5759872ee2a0740f789ba3fe9bac1ddf21f36d91995951f3a158244c5f2e69971e878960b902715716e29fd","ssdeep":"","tlshash":"f8d097012c91c82412d901cbb2fbcfb23aa610080801f88028cdccbf7b3cecb00165ee","size":249,"data":"","first_seen":"2026-06-28T11:26:24.423677Z","last_seen":"2026-07-12T19:43:13.960227Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/js/main.06e347ea.js","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a38ae308fa8496f3eeac7ce3e366c956","sha1":"4faea91541e1a0a167306860ca197f2ee2bd9b99","sha256":"ea6685c1da127981718fb5737f1e7b672f3079db17906870ab31093bf02828af","sha512":"30a005877e216c3f7619cf711a3d21fc176eb8e9b82f9ff94019824c898b51e29ee82e4a8a9c29d21487c3144aa27902212b21814a4822bacb5a2f69b144d5bb","ssdeep":"6144:M8VuiiTVmAD0zeG7wApFAmLOMW67NRzpFgIjkQUBzl6G/R27tpTRgAWv+gEB7I4A:l1LOMWMNzF3wlzl6G/E765","tlshash":"d2b44d84b156ba6d7e7710f1007f0609f33d2e0aa80d88b0f1e9fc9e25995497277fa9","size":520144,"data":"","first_seen":"2026-06-28T11:26:24.398517Z","last_seen":"2026-07-12T19:43:13.933504Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-12","alert":"Detects file containing Telegram Bot API","trigger":"krkahrtickets.com/static/js/main.06e347ea.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Generated new UUID:0296913639693937","filename":"https://krkahrtickets.com/static/js/main.06e347ea.js","line_number":2,"column_number":431954},{"level":"log","text":"Connected to WebSocket server","filename":"https://krkahrtickets.com/static/js/main.06e347ea.js","line_number":2,"column_number":432056}]},"http":[{"url":{"schema":"https","addr":"krkahrtickets.com/images/f1.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.127Z","timestamp":1783885343127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/f1.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495431-3885\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alBEisopp4%2Fg05AkLxz%2Fdb78gz0HiQ7IldNa0sA6dd9bil5SMXiQiQXxmd%2FyE71XyOZlgCOgYG3U55jdKPbuTu9f2%2FSEzGAGKWePF0QHgI17NrNpAfu57%2B0I5pg7x1JaIRjgAA%3D%3D\"}]}\r\ncf-ray: a1a287e28d9849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14469,"size_decoded":15242,"mime_type":"image/png","magic":"PNG image data, 418 x 112, 8-bit/color RGBA, non-interlaced","md5":"24f496074f07a82f9d87fbf0a9cc8999","sha1":"bab9872d5af76b3c981e800ff06f1401bcead736","sha256":"ba0fd8cbeb255f48178da9ae2774568a1ccd1810a2bfae36e1a8448249725bbc","sha512":"993546862b446e70fb20c3277152ea4ca8c8f22a5fde7d0888ee8d7544c32b7bd6fc67849d060df767bcc8c450c7dd10505aaf303272df768c692a8af939d16c","ssdeep":"384:B34uNcAVpBwSWqN3LQt/+NmEUoWwjhgyvdo8snXKBpa+qc:BouN/VbWYLQoca2WUXM3","tlshash":"f752d193a7de293cbe3194c2539c43b058fe802ba80c96855d7639551eeca741b38e0e","first_seen":"2025-06-25T18:16:51.779802Z","last_seen":"2026-07-12T19:43:13.880114Z","times_seen":5,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/media/Montserrat-Medium.63be92eaa819aa3b32fe.woff","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.149Z","timestamp":1783885343149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/media/Montserrat-Medium.63be92eaa819aa3b32fe.woff HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/static/css/main.5ee421e1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 18:43:50 GMT\r\npriority: u=3,i=?0\r\netag: \"6a495466-2595c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTOsya1R%2FND5M6Xj0Rs2ip123h7S4rkMnyigPr6A%2F7LVcSRP%2FNB6yIzMRSoxDEbSLuSQBVkTKbMGEX48ptiy7tTLEHCIthY9evg%2FNyWosfnfyi3xbh4gcxxpdHbWA7WhdaOvEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a287e2bda649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 153948\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153948,"size_decoded":154650,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 153948, version 9.0","md5":"c948594cf23f12ef0fe59473fc3917db","sha1":"894b48fb114a0893cfb2a337a8ee96099e2ec247","sha256":"0a98bef31f54895fafb87cd7fd7a2f43320263652b3a3e70ef4424ecce9262ee","sha512":"36c8a505423a46802f972fe6c1013efa7ed378afd0619a0ccabe020dbbf47fad2628fafdb234de37ee15055ecca27a5115d94af97fb3a969784730447cfbef44","ssdeep":"3072:C8NLxmPpYjfiNQIjUqcz0SQDwSHKZDEB6omWJa9NbaP+sh:CKxMpHNQKUqcz9SqZSDmWmb3sh","tlshash":"e6e323ca8cdfb00c8fd32d34402c1ede49956a5d83549fe21cad62ee645fb4aa581f19","first_seen":"2026-02-17T15:06:15.066356Z","last_seen":"2026-07-12T19:43:13.880866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r2.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:26.143Z","timestamp":1783885346143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r2.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545e-130a6d\"\r\nexpires: Tue, 11 Aug 2026 19:42:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBj0pYR%2Bs398krxO2Zpm%2F7NvhdYAF%2FRfd9bftgiPEg0tlaCbaEdu75sORojgQUSsJArofBmtgotwPpDBLImHDEPITRX%2FCJNOF%2FWm8e2kcibCOelrCb2LOdD9vlATGpD9AUuRuA%3D%3D\"}]}\r\ncf-ray: a1a287f569cf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1247853,"size_decoded":1248853,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1707, components 3","md5":"a8fa6fe232f793eab422c2dcd976f4a9","sha1":"0a692911e1017c2b7bf0ebaf67f5a83f31e752f1","sha256":"7f84d38e06d3e139f308e41428dc9c7cec5c03c1b6c164e8a85adc48bf863fe7","sha512":"ad4c5c1e0bb0da52444f7e5a688f00817b3600f8c423501d3f43d5f1e20a1203de5af2df137b26cf3643c841dd71cad5a05379f0f9f2edaaa312223d5b52429d","ssdeep":"24576:Fx+fJpbM4SukYCxHtLGijbT9bCzHwwmUN7pjeZl9AOO:jCJVSuk/xHZGobT9b4YqpeZG","tlshash":"e62533b1cd13263d692a8532d1a41eeb933467fc9ba0318b01c18ab997597b7fb5403f","first_seen":"2025-11-07T16:04:20.354783Z","last_seen":"2026-07-12T19:43:13.882563Z","times_seen":4,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l3.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:29.144Z","timestamp":1783885349144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l3.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495456-22755\"\r\nexpires: Tue, 11 Aug 2026 19:42:29 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3IQhWLt4e1e%2BLuuOoQOdsPCjATD6g7IB2NN9YtPIjojA%2FFzeS9MNax8ysEmkeR3PZD%2F%2BfRQoioMd5CZhR7wdrpzppyooeNm%2Bkq%2BHY9uq1GAKDqG5cYsLqg3fjSUrrhpiylI8A%3D%3D\"}]}\r\ncf-ray: a1a288082cee49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141141,"size_decoded":141703,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 817x613, components 3","md5":"7ef0a5da6ac0c5cda8ba449969e65c7a","sha1":"b9ea4661ccd9af1c08ed70f653b53e3e720b56b1","sha256":"3badc57a9177ed27adc8c6e7e6b0149a68dab6482705df279e8678edd83c4dfa","sha512":"fc926f3744ad2a17fb133ac0b1385cd85ef6dcd52da573bb02f502c37849cf35ef573e2d5dc87bf9af4de9db673569ece3676f26e8ac67aef5acc021c5cd2c51","ssdeep":"3072:CTxoI2SuLNunHIL6o7YV3JrkidUrBG7S3Zkl3:M4LNuHnr+NG7S3M","tlshash":"29d3234e01a1dde1785b9b3769f21c19dadffe3d07e51f83a0a647242a71e014dc92e2","first_seen":"2025-06-25T18:16:51.789533Z","last_seen":"2026-07-12T19:43:13.883931Z","times_seen":5,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l4.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:32.149Z","timestamp":1783885352149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l4.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495456-84cf9\"\r\nexpires: Tue, 11 Aug 2026 19:42:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsmiVp3%2FDUQsEhGfR4oOHPdFNIat0tlte4Gr0TFcohqeUaoA0gZK9Keh1KaGYHkEFG72W5gujWtbnUtvlVhMnJBmz95Fq2YigOTBdHmWPkNyXr%2BJJjyP%2B3rA1f0svmTQ195j4w%3D%3D\"}]}\r\ncf-ray: a1a2881af8c049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543993,"size_decoded":539657,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1706, components 3","md5":"34641cca0a3e70faa448538b15a6d314","sha1":"8ddde2947d2f602deb7f2bf225a8d751cb043191","sha256":"1c08e8ba085fd9242cd088dbe695e576648ee75ff1ecbd3d6872143720691f75","sha512":"94d641ce989eb503c21c5638e18f1ea54836bbfef89b07a3d5c2e91f23a3b46630729d639c187f0d4b31637f39b5ae33cb377862a8b4901d4a45af432ca0d576","ssdeep":"12288:wLA3o60ysNJdlUTemY/uEX0sH6FrV94Csq:yLlUamETkGcrYE","tlshash":"6ac423be00230d24ddb6c85d247a264a07f60088f672bdce329bbdc6911d5ffe6989d5","first_seen":"2025-06-25T18:16:51.696714Z","last_seen":"2026-07-12T19:43:13.885283Z","times_seen":5,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/np-krka-logotip-white.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.076Z","timestamp":1783885343076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/np-krka-logotip-white.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545c-58a8\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uThCknvteTEHG7FOZYs19fRt%2FpggKQZ7kkX3UZQ6mzazFP%2BcKTI5VcrnTtD07uCqypBJuRqyayNmqYgzTPEat9QwClWPJcMYRoGDdh6GbI%2BmYca%2BCHic%2B8JL3hM5YKLzlPK9%2Fg%3D%3D\"}]}\r\ncf-ray: a1a287e23d6149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22696,"size_decoded":23305,"mime_type":"image/png","magic":"PNG image data, 600 x 224, 8-bit/color RGBA, non-interlaced","md5":"035d8aa161df4f7e7aa415ff356f7083","sha1":"f0e463c1e3ec822dbe52b05bb23e8bf503a866d1","sha256":"23bc6824f89f982092479f40795b67c6ed62dcb29e2821cdb1d95c73d98ad1b1","sha512":"ad8554d6035600b8c01f407f4f79cee1b8883cb5c4fb94cb5ee89858f534f557f6d65b216f5ce671f805f27bd185c8433da481bbb31b74a6334959953859be19","ssdeep":"384:kXE0531gYncd5K+uRQCVTYOrVcEK+fCNjgjURknDdKiZQU9jcjDgSVgLm:+35FgYncd5K+kQQ3rysARknDdROQodVv","tlshash":"8da2e15fe75981ae18a537060ecb10671365ce08dd873abcd2e0accd66f975f2f86142","first_seen":"2025-06-25T18:16:51.75486Z","last_seen":"2026-07-12T19:43:13.885999Z","times_seen":5,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/2.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.110Z","timestamp":1783885343110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/2.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542e-5a8c9\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSOgV74LXdy48QHRvgCV8E5d7CyZDB3oe7AyXBY%2BYkN2MDIRo3hfsRePuSrf%2BucebN2vCzH9620yjjjSFfk8jV%2BOR5BcH9yVdip1hdWzgPCk9C7MSZc1El6RyrbINDFTBeIYLg%3D%3D\"}]}\r\ncf-ray: a1a287e27d8149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370889,"size_decoded":345215,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop Camera Raw 9.1.1 (Windows), datetime=2018:10:27 21:56:27, model=I*], baseline, precision 8, 920x614, components 3","md5":"49323944f1d94a33be25308c70dfdbb8","sha1":"86b318c4b0927cb7033900ef7013e6b85c909bb3","sha256":"8b2747b9faf7b404957ebc234c273756140a8c6ee559cd9f43b3fba72afc2505","sha512":"70e25af60a463c7d4d3ca203035ce8eae3d77f539a3c75c0fc0ba26e84f2b9ec96fef6e0c2156b11837a609c95994dd70169955b025710524ae7d78bfdec36a2","ssdeep":"6144:y5eszUPnkQok7DUXIIp9OfmvTUIoFupIEF/fBRPW+0uaJcR2HxkvVmjqJXLQ9xYc:y5Anxok7DUYIP6mraFuhHBtxaJcR28Vs","tlshash":"3c74226d1c856c2bcc6e6e3611b19132a30ce69c4b84a916f0acfbb13bd35e37174ca1","first_seen":"2025-06-25T18:16:51.801799Z","last_seen":"2026-07-12T19:43:13.887974Z","times_seen":5,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/Flying-through-Krka.mp4","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.159Z","timestamp":1783885343159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/Flying-through-Krka.mp4 HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 18:43:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6a495453-5f385bc\"\r\ncontent-range: bytes 0-99845563/99845564\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3spqhjU0a6mXESP5JvWrVZyVDVrFHOAD16tLUsfltlWfhu%2FLap5pdkuEvpnvWQVfsr3Vrsizph%2BvZyiNH1OktlgY4MD11bUo0sc35nYdP2BinHI%2FcRNnoh766lDlDULEQIzjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a287e2cdab49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99845564\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T02:18:32.815563Z","times_seen":17253256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l6.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:38.140Z","timestamp":1783885358140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l6.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495458-1886be\"\r\nexpires: Tue, 11 Aug 2026 19:42:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwAu%2BuwjkdbLmCXuQ5SA8NOD0vOLnPGL2I8XnYgeVc9VE6P59BgAzEJBlMg3L%2B4zR%2BcVKHa1hnN%2B6ckG%2FWzN4WAdgNTJN1c9QqufyInUMCRrFgKX2F2sHOM9eHPBBDapNJtwUg%3D%3D\"}]}\r\ncf-ray: a1a28840683949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1607358,"size_decoded":1607815,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 4776x4776, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=NIKON CORPORATION, model=NIKON D70, orientation=upper-left, xresolution=8, yresolution=16, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2009:05:14 16:30:12], baseline, precision 8, 2821x1881, components 3","md5":"9bbc25925249af131525e007288d2f9c","sha1":"75d8b733404711557f9c9184d9953d894adc8746","sha256":"ea3a7bb3f132099ce1c8fb9ea9ae55441c9b931513c7bc207b207aa007bae145","sha512":"b578a57ae6516516f70271c8f55606425980e38ca3f42d2466b456b7e0168be9744084d5ac6d67b465a51a5654a8b905e579d4e2cacaa6356c813452a70f8923","ssdeep":"24576:MUZ7WAdT58Ama9Pn0yExbEhEX0wR6nHsbiiMTo84sfPgz:MUZWAd98Ama5vE7X0MuH95o9rz","tlshash":"7c2533b9edd8bdff158de230202b247495b5ac714913d66d5323b22e16c3befe418a12","first_seen":"2026-06-28T11:26:24.380664Z","last_seen":"2026-07-12T19:43:13.895649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/Kamicak-10-scaled.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.104Z","timestamp":1783885343104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/Kamicak-10-scaled.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495455-10d99c\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8RD%2Bt4Vq8kgLp1lFa3pS%2FWFVrngQRppDPO%2BxyJwSFZwqwZMRc6hF1RA0XmC4EJXtul5CmoQecww2V8OnacFzN%2B%2BYLqgbLACvq0xO07fiq%2FI43vfJCNxwE0gNq9Hg5CZSlRq5A%3D%3D\"}]}\r\ncf-ray: a1a287e26d7749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104284,"size_decoded":1105244,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1707, components 3","md5":"376ef2850cd6b0beaed40882797dda08","sha1":"3493dfdd6b78faa9f2fae731315110502f43d91a","sha256":"4c9fa3cb6d2d947f0b2363fb7ad96442e887b12c2ce3de5ebcd90f49288bff85","sha512":"8bdf82978c4873f0b383b097ac1db3dee5c63ffb64767fb7513f1a67586f323cbb3bebf03db12731569d8369013f97b57c40091c8bb6832546defa5e8943708a","ssdeep":"24576:sDTq2RM1prIPq/G2VZeQj9aAuISVDPpNJpbS/L95AqVtVRO4zUk5:4Tlq/G2Vos98IsDxNrSD9yqvlzp5","tlshash":"232533c97e42651d8e3d093bc91e278f7e3e8b569134a81036129ba4503dbfcc7adc29","first_seen":"2025-11-07T16:04:20.358077Z","last_seen":"2026-07-12T19:43:13.897286Z","times_seen":4,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/media/Montserrat-Black.6b6556afc15ef10d0d22.woff","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.143Z","timestamp":1783885343143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/media/Montserrat-Black.6b6556afc15ef10d0d22.woff HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/static/css/main.5ee421e1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 18:43:49 GMT\r\npriority: u=3,i=?0\r\netag: \"6a495465-25900\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BP656zBYIoPh9vs0Rcyc1l8dAYKtcl6PFeUDJ7YWNhXCiaHrl9HW0w7Lps%2F8bnJcUUrwJ2%2FeVWImj5abBD%2Fyesv0EoSFBu8NO2nb57tkUrDfIrBZ3VxWsMy3n2rxoAocDlH8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a287e2ada249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 153856\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153856,"size_decoded":154558,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 153856, version 9.0","md5":"f629661cc6835f79802c9b8ed107673f","sha1":"f5ac51f41531a71e03a69af8f2eb3b81b4e1bd14","sha256":"8f41cce7ad949dc82be4bf246eab5c0a761d29f7507a5aa6bb301cb5ba995ebe","sha512":"85807a057308c77e75ca506ca6920c00d8e18659640194cd3e7b05e6b02d70dd13d7fe7d66dc678e0f0606781b5126f96895c59b71deddac092681ae14bea368","ssdeep":"3072:7l8hyrICTIoKJ6spcDsVuREt4Uo6hV5YAXu4DMto+gyEdFd:xzdI16syoJeh6nqAezDEZ","tlshash":"dde312951634b49137a4a132ecf7c23cadad756599efd04e480216e832e8f2c3499ff8","first_seen":"2026-06-28T11:26:24.385236Z","last_seen":"2026-07-12T19:43:13.898882Z","times_seen":3,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/logo.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.856Z","timestamp":1783885343856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a495467-26cb\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBZy0rWDom0fcGA14G9rByqFD5sfxOFC1lvVDIhCKGZUliTn3%2FpEfXH9MSbWu7z94Q7rsOXwhb4i3IkYsbJaGzEOrSdyAzT%2BoUCQkNVhvOlNQe1FsK15nk5g3LYaQfSWYsWgcg%3D%3D\"}]}\r\ncf-ray: a1a287e71ee749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9931,"size_decoded":10430,"mime_type":"image/png","magic":"PNG image data, 198 x 201, 8-bit/color RGBA, non-interlaced","md5":"e48d252b5c9fecdd52ad77fdb0a9ad0e","sha1":"002e686dc70c6abab7b7d8edf17d15bb67e8b53e","sha256":"6dab965f4ec8130fafa123626021d9cbeb847e144310ba20a04754e9f4b57c2f","sha512":"b2d00d5983d8d78eaf801d94d20c785d1a46c969c371d830197a70341b2235fa630fc1f85c8e65d4f306543042073badcdedbaf446d9fb8be77d3599f197f35e","ssdeep":"192:Ac8/erhF1DZW7G17aluYmJkvwub2JwNArnXG15xdziNZCao1mz/ysQJF1DjH:AK9F1F170uTkouaJwNSne5HiSkzRmF1/","tlshash":"7922bf2861c88c1548441c9b28f19107ae21492917d4f579b793fb17991bfee2ec3f5b","first_seen":"2026-06-28T11:26:24.413559Z","last_seen":"2026-07-12T19:43:13.900427Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r5.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:35.147Z","timestamp":1783885355147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r5.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545f-6a355\"\r\nexpires: Tue, 11 Aug 2026 19:42:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3pT93lWru4cjTeOWgRhUl4%2FNbl%2FD44PVJ%2BJ%2BD5SS1IWcnLjfmGQBVAUrPGNCPV%2FNfYqPXNQvUylbFdhIpxha1C%2BOehCdlWmC0Gl%2BC77QUodvmRd8q8wuxa%2B1zw%2BbqOYYoUpow%3D%3D\"}]}\r\ncf-ray: a1a2882dac7749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435029,"size_decoded":434981,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1706, components 3","md5":"ec45e3d6a205e92a4419a32ed35d034b","sha1":"e2f9fbd65b8cbded8561b8e018cbd434f68545a2","sha256":"f57e09d8d21add272913487588343f8feb16dbfdda242da063e7fce7661f8f26","sha512":"54ad3726574250d4105241416630343ea11bcd7686b68ebb3870019c09100b17fe9612afe045a719a46e2176e2106189920e23b571b9083300dad4ef6895ab17","ssdeep":"12288:U/f5Coxwj9zc1AnEMamRBLeMbD+HULSUAK7:E8I1BMVBnbAK7","tlshash":"c4942396939a4357e8918677ed0ee8716332bbedea9ff1801602bd4b284510cdb2137d","first_seen":"2026-06-28T11:26:24.392873Z","last_seen":"2026-07-12T19:43:13.901153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/media/Montserrat-Regular.c8fdcb36989883b5b69f.woff","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.146Z","timestamp":1783885343146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/media/Montserrat-Regular.c8fdcb36989883b5b69f.woff HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/static/css/main.5ee421e1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 18:43:50 GMT\r\npriority: u=3,i=?0\r\netag: \"6a495466-258d0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dirJyjzx%2FSSKxXT1wqlLu%2B%2BetO0apSBw7ucVXCTsjk8Pd7e%2FC8qx%2BGcDuDnYRAfB%2F9g894oaHk87FlTXD7kiT1wylZ8Fxz2vr8VpczA0DoNpRFNDmH846bcyvq9xwTZtlwu8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a287e2ada549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 153808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153808,"size_decoded":154514,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 153808, version 9.0","md5":"90bcfc949f439c6dcd28a1d7d089a020","sha1":"ee14b64fb8360e4617285bf42500177fafc784fb","sha256":"12c2e8095d43f087b322f8416b0bdf8304d1721664a7048ab7e736e2df2f4f2d","sha512":"07957162e60e967e20d8052ecb37e3e36d987bf3769d4d5b3fa28504bdec475a84301d84512033c9f2cbda6d7d37caa6871e130fc9c4aa3ef4b9592ce101c36b","ssdeep":"3072:Ys8OOCWaqoZvdKzBsfac8/yoC4S4tQDwST+dysC5imWEb70EFxftw:Zqa9dsP/yoTS4SSDm5b3Fvw","tlshash":"3ce323e1d0d8c34cbdb191384938fbd7854092684573fbe954297c6e73cd66790e2e26","first_seen":"2026-02-17T15:06:15.043095Z","last_seen":"2026-07-12T19:43:13.902302Z","times_seen":5,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/logo192.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.852Z","timestamp":1783885343852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a49542c-14e3\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCYpsJI2a485HNwfY8Fp0Z9WZKqjQg7%2FKsZxb18UpBq2G8shgV18SqTW%2BNPS8SKU3loKT6QQ3f1B5JqA1SgombtQ8dqaK7lAvlcg8Qyus%2BXqESmBIfwCyZ5jWXTWds2%2BHb%2Br1Q%3D%3D\"}]}\r\ncf-ray: a1a287e71ee649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":6088,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-07-15T01:59:50.57417Z","times_seen":11472,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:42:22.116Z","timestamp":1783885342116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:22 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\nlast-modified: Sat, 04 Jul 2026 18:43:51 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FdYnatSKX723giaAtaRWhF6qFMpqvO0RAd%2FArIjtVIHsP8KKX2%2FzpPQwAgotwODZjt2W1CxyFvm%2BqMrlUWbHNpSgyaHUzD2mCTZDpQZm7%2B0LuUBdocKgShR880oWSoj7AdertA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a287dc7b8a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968,"size_decoded":1210,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (968), with no line terminators","md5":"8b243205d98cb047279e4931028b42ae","sha1":"824fc5dc81e1831c0901e070a46b3f89713c4184","sha256":"f07bdce69738fef0720707cf04ac97fa25da367086900739313b0745a18d4c7b","sha512":"f0f5bab6da59e197dfb856d2c9e122c82ba40e70e9cd38aea5c2c523bd0ccde4bf2f4bd187ade3416a5d7bffdb055e152f279566bb40e5ccb0b3e289f3ab6165","ssdeep":"","tlshash":"9d11cb12cc41c849927003abeab3e52da94a300c9a52fc9078ca48bf6ad4f938826959","first_seen":"2026-06-28T11:26:24.394944Z","last_seen":"2026-07-12T19:43:13.903914Z","times_seen":3,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":12,"connect":19,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/Ogrlice-kanjon.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.105Z","timestamp":1783885343105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/Ogrlice-kanjon.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545c-45e16\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvP8FgZ%2BnF7IXXyxPrDSqx5bGmzz%2FXaXiBk07JLIxiMZj89r3vpJBxgvei2G8HKPs7gX4%2FiO4hNv60bpxA7phnIhrKNAI0OrsnqpHm4psvTeTyXUmOna7svlAzTrQ9wU693PzQ%3D%3D\"}]}\r\ncf-ray: a1a287e26d7949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286230,"size_decoded":275824,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1296x519, components 3","md5":"a89f5052b6991e83dc6cd96a5abd9b2a","sha1":"8023a75ad49d5953907479a69cbdbe8f3e451df5","sha256":"228f282f613561a90911eac2f6c25867b8fe55a53c920b450226e7d0134b1174","sha512":"48c48294000cd204c76024e37662e88cf772b7095591b2106186a4e2efade1029470238305e63fa4ce92f3e72778be8e0098a8223d1dbf8716a835b880741b4b","ssdeep":"6144:I1c158IYk9nytvofD5m2921JSr9ySpQDaxkhxnGWTeJRSOoQ9zq49fe:I2ANkySQ29DpOzdog","tlshash":"b25423338b56cb51f3f0bfe15d76cf4704b35d069017a5a760acd2a8bec67994c8a888","first_seen":"2025-06-25T18:16:51.702272Z","last_seen":"2026-07-12T19:43:13.904944Z","times_seen":5,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/1.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.108Z","timestamp":1783885343108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/1.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542d-12713e\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vt%2FVQqUnEkCYA0ZVr0B%2Bbfpza26JySIclsVfqJz9poKpOfE8YYVFKCo5Y3Wl2gEBv6oCiRNnsUdZnLnVF2WoJqHy9d3mE%2BFt4RedR7iq6SE2ivCgrjC6ynJ%2F2LSczLAf9gZYXg%3D%3D\"}]}\r\ncf-ray: a1a287e26d7d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1208638,"size_decoded":1188310,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 2000x1334, components 3","md5":"1dcc535a118952bc47c1c875d8a2ade4","sha1":"736d1a492e8994c51f97b5b9a85c61d001cbaa13","sha256":"d0714d493e4f7663e1bfd4111e617d0883dc123f413f38651db97e1b329013e1","sha512":"ab4b25556dd292abb377fe3655c7c37c1eafe1933d8e61758648858cbbd07ab38c806f2b5c1441dcc6be74691b4a34249830de27a4c823dfa4125cdbc855a3cf","ssdeep":"24576:pxR+cvtXv26pcBj0SBkJMxW5jfZrlyEAFHAq:p7+02ey+JMArlytFgq","tlshash":"1425333f777bab58dc808a7864587eebcca7e506ae7f7920321f848928578807f4511d","first_seen":"2025-11-07T16:04:20.352712Z","last_seen":"2026-07-12T19:43:13.906078Z","times_seen":4,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r0.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.122Z","timestamp":1783885343122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r0.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545d-eb3\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwMH4RlA9GAYo95Oxga0PN7BOjqvKNNxoJZgAhHzVWZ717%2BteD%2Ffpgsb5jdZ3sCxmNnsg2OvI9UjLcMGiZfnfEgIk0Cka7KxDnIzadIHlJ8AVUKK8kgl4YK84m0fAjpwvTcobA%3D%3D\"}]}\r\ncf-ray: a1a287e28d9249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3763,"size_decoded":4270,"mime_type":"image/png","magic":"PNG image data, 180 x 173, 8-bit/color RGBA, non-interlaced","md5":"6525cd4f3aa7c6ccda8de5b9e2f296ce","sha1":"06a8e058be0ac471b79813821f9bb99c70056325","sha256":"4222f39ca88955efa9dfc7acfef4359e7035250293c15c0cabb51d24648fd04d","sha512":"51f8bcf043ce0c8910a945e6db38ca9b068fd4915aea78d3779c59a2bde041fa0f0038df14f881ef372764d3eef3a7079007c7dec32ff83a545fefe0e4e83c60","ssdeep":"","tlshash":"0171f8fad9ab6ec5f1eb410239f02e85016d88d6c37c20b075a84cd03e9c141ea70f3a","first_seen":"2026-06-28T11:26:24.397664Z","last_seen":"2026-07-12T19:43:13.907002Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/media/Montserrat-Bold.c8166b88763b4fb2ac2b.woff","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.142Z","timestamp":1783885343142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/media/Montserrat-Bold.c8166b88763b4fb2ac2b.woff HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/static/css/main.5ee421e1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 18:43:49 GMT\r\npriority: u=3,i=?0\r\netag: \"6a495465-263c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRaFROJoSQvGg%2FGrLxLUiZ6R6pKg9z%2BGyEteSsi6qmGzwn0VEsGmzpba21n7TOw8MoZUHNRfVmughz53Lqy9smWQffOJMbB3b8cB4lZlVCMXzYTFZ8jfYC3c60dZeyImU8ouSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a287e2ada149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156608,"size_decoded":157306,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 156608, version 9.0","md5":"030b9ba6768cef715aa9ca01007cef9f","sha1":"66125e69007bff942545b34cdad968972d8ba873","sha256":"0ed0b75ea4a1c7a2cd14d2443b49c5266081506d91ab39baed9b02a38c8a2cbc","sha512":"190a9ba163041188816128d4cb9d6ec28264db5490560e64be1cae2582ba5311a285bef277a626e1fe4d97d01354e6eaff3510b1438236aef4878d6ab406174e","ssdeep":"3072:L80FgljTmPkmfB0UCP8pGOJxkWuzlazEju+Q8AwzjWm:LAsB0UC0UO4Weazsu+nlz6m","tlshash":"c5e31215bec68d2ca764213e6a9c41405bb743761308fff84ce1e5bb87076eda6c9263","first_seen":"2026-06-28T11:26:24.378816Z","last_seen":"2026-07-12T19:43:13.908176Z","times_seen":3,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/flag_hr.svg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.078Z","timestamp":1783885343078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/flag_hr.svg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 04 Jul 2026 18:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495431-137a7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H033EQaNJqnwmK5Y8jF7OOswaVjaWNlOesyQxj1nLnyvm5pEx%2B9z6RitJFjgue1T5ElskcmJHWAZa4UNOxblsNez0d0om7y99vK5otYPttecZ1RdfJN4xyZq71hevX27j09m2g%3D%3D\"}]}\r\ncf-ray: a1a287e23d6249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79783,"size_decoded":34568,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e110ec4c3405e49b5861df0e586a795","sha1":"ecff0d6dbb1da8be5e87385a0207b883f4ef5360","sha256":"1e0eadf8ac9574d892bfbd48e6c93f531e703697fbf989b26f97cea2c0838a12","sha512":"1f6fa625cb6da7753cf74bf6be7f8125094697970e1cc44f934474c795aec2a3339af782f789be945ee18973090517e1ad9c0670315382a72f2afa033727fd52","ssdeep":"1536:6aIwaIaY+XPCy02Z0OtZSkDySgGYzuufgW:9aZyNkDySgXAW","tlshash":"607335ca6154a38ce8c9b75ec7afddd0131ea06b346685860effc39c640e585ff46868","first_seen":"2025-06-26T01:55:05.508505Z","last_seen":"2026-07-12T19:43:13.911892Z","times_seen":10,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/skradinskibuk1__large.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.107Z","timestamp":1783885343107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/skradinskibuk1__large.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495460-23b8b\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unVkSt5QGu3hLoFP%2FFT%2FP0y3qvOrRZuNujYXggdqbADLKnRI2sgagdGs5HVazlskaY3typYZ3R6z%2Fm02aEawxq%2F8uj9%2B4GzBpMIIC%2BQ71%2FSkO05NG3g6CSj8Xk%2Bf4BhxwEtxEw%3D%3D\"}]}\r\ncf-ray: a1a287e26d7b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146315,"size_decoded":146621,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 80\", baseline, precision 8, 1024x683, components 3","md5":"d901a6a843dfd96fcf5e6b923903a9d7","sha1":"ca485641e064729892bd628ac406eb332a52bf7d","sha256":"277ba5ff806c7d8ac391bd31db90fe132c4a2cdd16a03db78ad861bab762372c","sha512":"03be7f6847fd10da5b9c4649b3c4cb30c6d25057db9a21da98512617d2e269a75e454ec39ee49f5aa72c16f49274b069274256b9a4cce740c9447bc4711b24ec","ssdeep":"3072:H/z6exW6qQPFZ4lhT++2IizWoiEkVd+dV5TNh9SxMITNz1r5irl3mS3er:fzZ6QtZ4lhC+uzWAkVyVJNhC11orlfM","tlshash":"0be3121277621872be91d53ca4ee3839b616b388d7fc041dce53ba62513d12a7dfca06","first_seen":"2026-06-28T11:26:24.355374Z","last_seen":"2026-07-12T19:43:13.913817Z","times_seen":3,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/img11.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.130Z","timestamp":1783885343130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/img11.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495454-4deb\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DKZuSG1e4VASFSNrE6o2p4z%2FV%2BB5jjPP9JCCfvTN0eOp7u093XiYdNOfY1wIs7Mcp9ZYcXamJg16QEKfipUDVMNjXlgVOUFVCtic5Y9MK3wyDPPWtYXvdo0Cc32QTD3HySSl0w%3D%3D\"}]}\r\ncf-ray: a1a287e29d9b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19947,"size_decoded":20714,"mime_type":"image/png","magic":"PNG image data, 122 x 118, 8-bit/color RGBA, non-interlaced","md5":"f98f9ef5ade2d5bf8dbfc56f6c608bf1","sha1":"94a2b72e313e5e50c62196ff15c260c621866e71","sha256":"e97f920542c925f5100388c178a74d63d4c4aa2e4a9c5e2a2b67b24109f692fd","sha512":"8d568ea54eec966132d3b11b8dc071d5ad45c2de98840b49d60b79142bdd4753e6cb6c62777c2fe3a2176638bc40746d5db8d21db97afd94838d6ff73ad5c66e","ssdeep":"384:tdLYAmxFwyqrLPb00cFJbms9xB1SY8tldUkzcck4sSOBhslLn8sRq3AKsqRzdHmv:t2AkxqrzbJcFdEtJgSOUlL8sYQKb/2Tn","tlshash":"1492d1d4664ffd2e60ceebec7610b6430d6746e0ba4fc7809838d199ed0b39a8a00d06","first_seen":"2026-06-28T11:26:24.350782Z","last_seen":"2026-07-12T19:43:13.915295Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/media/Montserrat-SemiBold.42339a75fc3aff1cdcfc.woff","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.145Z","timestamp":1783885343145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/media/Montserrat-SemiBold.42339a75fc3aff1cdcfc.woff HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/static/css/main.5ee421e1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 18:43:51 GMT\r\npriority: u=3,i=?0\r\netag: \"6a495467-25d2c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiGB9U%2Fc0eRzhod3ZUYvO8xMC27N1Poa9VfX7SvDfSNzvhgu1ym%2BQ2%2FSBC7FUW%2B9o2rG8pqpr4QG3HOvaoci%2FsC6nGP6Lxgu%2F1bMA1%2BHcnw1UkRIpbfkAMjRazA30vR0WbCHKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a287e2ada449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154924,"size_decoded":155634,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 154924, version 9.0","md5":"97f883e93f5792bae420ebd6e3d5a1dd","sha1":"604cd815c7615606171c920bd1a5645623a7d38d","sha256":"65b0428140ac0f66023a03dcdedeb45c7eb8471330a5df6ccdff4d902af52c1f","sha512":"dddd27cdca031d895f7675b765eb05f95cc7b0c0c5e3dcd6cb3e5afed9f63490c107334701bf8f16b5f224191fdebe9c5e8d52ec475474700fe6dad7d1827cc0","ssdeep":"3072:e85M2WNwzjYPB2CDumbclQ3VZNLJ+jYk6/+ipBFy5ZRFz2W8kiUvZ6:eyEwCB2CDxbcY3VJ+pKnpaP2W86vZ6","tlshash":"13e32358dd359438817e683d5db09e931ece1616e1e208ae6b4832470cdb70d61bbbfe","first_seen":"2026-02-17T15:06:15.032502Z","last_seen":"2026-07-12T19:43:13.91657Z","times_seen":5,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/css/main.5ee421e1.css","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:22.510Z","timestamp":1783885342510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/css/main.5ee421e1.css HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 18:43:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a495460-dc10\"\r\nexpires: Mon, 13 Jul 2026 07:42:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8g7JIuUaMrPssyi8URj27l7p8bJdgNFV02K87M4QV0MDbdm9HjUkJ38Kkw9b571IM5fPTUDpMckj8DRYox%2FmHpopDfEaz6FmXfxYAPhuxs%2BrN2UM%2Ffi7R0zYAxxUP0UQ4gHhw%3D%3D\"}]}\r\ncf-ray: a1a287debc1649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56336,"size_decoded":11283,"mime_type":"text/css","magic":"ASCII text, with very long lines (56227)","md5":"f686a484573db1bda82ae549ebbbcc02","sha1":"48d32cca490f3e7ec8416916731ed5b150647522","sha256":"9f75937b31f29e54b5b816e9634e02f1602f384bf16e4dcec04e39e38728a142","sha512":"aa620dbd16e9f634fd667f1303b37ad911c1f1810a1a021261eed5f3212c2b7202da185084a4ed8af6dcd291e6501b1161515ff5a71dfd5d5b84d0aeb7988f09","ssdeep":"768:kF/Cu+9ahZWatAUcgOI4XNN01MwhwuLarN:kF/Cu+9ahZWatAUcgOI4EL4","tlshash":"77438509a615253e7c1398f2d2dcae5ce11bb4c1debb15eabd9b50058ac27f70ea3704","first_seen":"2026-06-28T11:26:24.363602Z","last_seen":"2026-07-12T19:43:13.917255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/4.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.115Z","timestamp":1783885343115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/4.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542e-fab9f\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjrd4ussdkkyYhCtamIVXDCZYYqSlNnDYumR%2B2C8VlG%2BfhJxxr8rRmo19zrANSz5b8i%2FGiIa8ec8x1%2FITln5LKQG0tRBuMVeRUeWIyAPonvIfq94SZKKqLGXN3UpWn4%2FdP4rlQ%3D%3D\"}]}\r\ncf-ray: a1a287e27d8649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026975,"size_decoded":1009028,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop Camera Raw 9.1.1 (Windows), datetime=2018:10:28 15:49:58, model=I*], baseline, precision 8, 1839x1228, components 3","md5":"97b4fe22b4c347a31a2f8977c5ed3442","sha1":"75a5847710c257c271803821e897c6574aeee0ae","sha256":"aa69351c5a94ee9989a7677cc5a692384544105c86da897cddaf1756e9b04cb8","sha512":"ce556dcc3230d4e0859962420e6d40218776023191c8ce8196f14d1c4359b63dbd35fa14a40165038b0f2d6ef957a9855d9f73660cac033c53b98bf7214fb782","ssdeep":"24576:IoJb0uRIWutlm+03DPd4OzrVqlt11tXUrLP:Ie0uGjm+037dTzpMt11tkn","tlshash":"9225236d03c1447bc2de666046ca638a2074a365679e8c2ff79ce474ff364a793602ed","first_seen":"2025-06-25T18:16:51.7282Z","last_seen":"2026-07-12T19:43:13.918874Z","times_seen":5,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/5.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.117Z","timestamp":1783885343117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/5.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542e-e7394\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHn38NbpCQEGxwW2C9DEkspsMrbOVu8FApvhgmN4DFDLpozE4jJ5HeEoT53qCufycxAJk1MM%2BmMwt1uthVZ6q%2BRY72YUk45%2BpgfHCQ7dmY1d0xrx2sYizt9VghqaUpkM2smzJA%3D%3D\"}]}\r\ncf-ray: a1a287e27d8949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":947092,"size_decoded":925214,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, copyright=www.3kcinema.com], baseline, precision 8, 2000x1333, components 3","md5":"bf5888ba616d3371f3b3887181bf6e7e","sha1":"af787d4abda48cd5d9385fd480670fc63c4d4d8e","sha256":"a3837222c2d609a34ad53704697649529eab51608e9ba89d335f9c537c4fb814","sha512":"7fa7d617d9eb57db1c7ff3fa141bde9da8a06d2a1df296ed6a1690b427c57333367a26872f655d726a211c58234e5c616bdc949907394a8b704c949617d92009","ssdeep":"24576:oMoQTBflgX4COQzqgDjluBEa8M07BnBo6uOU:oMRTVlgXFuUABaM07BRU","tlshash":"6515232e33d75da0fbf9d2fab40195a760ff58de34de8291b82526b0f5060b255a108f","first_seen":"2025-06-25T18:16:51.78495Z","last_seen":"2026-07-12T19:43:13.92018Z","times_seen":5,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l8.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:44.141Z","timestamp":1783885364141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l8.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545b-76af33\"\r\nexpires: Tue, 11 Aug 2026 19:42:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHgiwjeOYH0O%2FCggYNPL4JgluThaBnB8oMCnSUdJidWjMjwC9tZDOpUW0yW%2F6WDZe%2BV7gnx6UJNfAd0LwF86XpKfG9EwRacetqEDyyTsKfg9LJ3BGwzeKZRC3LTawjmJT%2Ff6Hg%3D%3D\"}]}\r\ncf-ray: a1a28865ef5e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7778099,"size_decoded":7760177,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, manufacturer=SONY, model=ILCE-7M2, xresolution=126, yresolution=134, resolutionunit=2, software=Adobe Photoshop Lightroom 6.12 (Macintosh), datetime=2017:08:22 13:57:24], baseline, precision 8, 4415x2808, components 3","md5":"70a93ad3f9bae1ea666eef7055d3ade7","sha1":"27c6a4049ee8862fc6b6de034e859419ce695fb0","sha256":"671f9e4fa3130a147090a4ff82b5adc46fd736d7206bb360955b54e25e9f6598","sha512":"47f7cd5c81ac80b3f710007d03ca82d3f04c924f437fc2acab268804e90a6032d611d425eef205d12f8d81e93f4f9c4ac7743eb9fd3e3b0ea774469f2d6af787","ssdeep":"24576:PwxUO4IPxxrdzpGUJtZKaIfnsMmbKuaeyJLGK:P5IZZNhIfnsP0e+GK","tlshash":"96252311af360cc0c0e8fc3238c7ddb64ea94fa1a1b3059a71dd991d9b5439e16cbe89","first_seen":"2026-06-28T11:26:24.393943Z","last_seen":"2026-07-12T19:43:13.921443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/q4.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.116Z","timestamp":1783885343116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/q4.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545d-26fe\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxaD3UKlgVW1ult8UCeXujSKPrHIYT47xmDQzibtZlnmxXICLabgUwow72YxZDDgoI5SQo4bSXgZNIQPs8kKBTPmaw9jNe2ClwkL98170WyanRzJn6tlHYRZyzXi2zGqkXmIGA%3D%3D\"}]}\r\ncf-ray: a1a287e27d8849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9982,"size_decoded":10745,"mime_type":"image/png","magic":"PNG image data, 180 x 181, 8-bit/color RGBA, non-interlaced","md5":"43da47455b57ed2a182490769de60f96","sha1":"52a4e491df364135370e8f75c6ae3cd69e465c9b","sha256":"8c9733af8fdc2d1c4fa9463b6acd674619baedafc0c32237e2784597c682f510","sha512":"83ed82dde781d0ec5408409e79af361a259795a04ecbcb3f6a96b714877aea17ffe6857ee813b4a9bba1d66d914fda25efc5340230f9387d55ebca2488b4f211","ssdeep":"192:j5NIody+kd1Gv8PNGvAz85XPbfpKED4G+4DgtFtf8bFBB:FNIocd4vGNXEjjD4IDIDf8h","tlshash":"6b22d02439f893d277e6686a1410478e3bfddb7c2674b53d066032437629c58e12bdc1","first_seen":"2026-06-28T11:26:24.402272Z","last_seen":"2026-07-12T19:43:13.923408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r1.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.121Z","timestamp":1783885343121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r1.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545d-7a8da\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBcdiak0XzUKHpU9gKBkAiyjWyq0ZUpps2YIqraUTkqv%2Fd1mpLSzgCUDfRI12QUbCxV5gGt3V7ML55xYGpyYJXTOB0cAqSEXid6IY4MdRPrjEmF0EqDIvq51wiMAym08%2FnTRAg%3D%3D\"}]}\r\ncf-ray: a1a287e28d9149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501978,"size_decoded":498155,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1025, components 3","md5":"d36b3797cfd20a19f4170cdc7d99c1cd","sha1":"651e57e8f2dd9522e97c4068f6d930508df13719","sha256":"ffa91e3408ddd0fb908484430f5ea8b8e270c68e1fd957f22a919cd2899f1a1e","sha512":"b6bc23e2cf7b9142af9aadfabccd7c182a6dbc7f473414b57563f7187a41f9cff3c5e0f1d0c972c9acdbb6dd6a31bb8e7c7c949f886e074e165b5d254245b8a8","ssdeep":"12288:gh1DVigzhHc+aD2fCWgf9djwQRw2x8G//PM:AN9Hc+arXf9d9U","tlshash":"3cb4235a832405f2f8719e2e5d29d85f0b326d6a059431eda0e8f14fdbb24d58fd00ee","first_seen":"2025-06-25T18:16:51.746262Z","last_seen":"2026-07-12T19:43:13.92502Z","times_seen":5,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/c3.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.125Z","timestamp":1783885343125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/c3.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495430-1c430\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAa1Odq0aNOJrM7vljAh1I5ov7j%2BOK3DGzDkRQMiMWr48C0XParjDFFBBbmhAPecCpoK%2Fc06v2I1ijKjb6yBwY4jvsoMGztwpfT1klImR8%2BwVQnIaMp6LvdoB%2Flq14teZ1wjmQ%3D%3D\"}]}\r\ncf-ray: a1a287e28d9649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115760,"size_decoded":115096,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"63fe0e8d318913cf7932edd524bb4efb","sha1":"56b05af40d0d622a315647e66fdc5b69a7ffae94","sha256":"43ecc170321c79f07a724b919324175db194d86741adec4bc76172790d576036","sha512":"e89aba2a99063f379361506d6b18d45de789c89b36889dcfb156e897e2fd5933be723290975adc86012117907e21d2803ce32470313ed089ae9235e04ca600c7","ssdeep":"3072:V56MBYtvcNTplaX328opLCzdfKNYf6nEi:V05tvcflaXGtLCMEi","tlshash":"9fb3122770318dfd94bd40f26f48234929209d4f844b90a6791e9fe286b5e81ff68e4f","first_seen":"2026-06-28T11:26:24.389293Z","last_seen":"2026-07-12T19:43:13.926294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/f2.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.128Z","timestamp":1783885343128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/f2.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495431-2cdc\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIy9zjB0gRABEiXKuqXnfcE7UXW1vBse7emxrJ6Pqm5H%2FA5w%2B2HDu%2FA1DaXUF0o5jt006m8RW0c46AxrtVX4gW%2BVobivUeVaBraT15lRHtDtwjR3J%2BmKPFRssRh1B9brens1Lw%3D%3D\"}]}\r\ncf-ray: a1a287e28d9949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11484,"size_decoded":12257,"mime_type":"image/png","magic":"PNG image data, 217 x 77, 8-bit/color RGBA, non-interlaced","md5":"99c9587fbdd555d182e9873efc140a02","sha1":"1476bace837bccf37403c65fd838c48b275a0fcf","sha256":"34b86fdc5a3d8a68e0a953e28cbfb6cd6378d292865bbc961dbf8efd111e866e","sha512":"86e60226cbf7b763a677db741ed8e89def28c073e8cdc4f79c6f69b38bf2cceb65a5050d5f335f18b7e46a6bfc04f120b033a223585ef2f1517658ad76b762b9","ssdeep":"192:L9HfTi4xeeQWI0WlRP28h/QzcCcxmqum4Ll5Z5+jI9CNEzFbc20G0HBnHsr69gP1:L9/W4xeeQWQ6BcxmquzH+j7Ao20G0Vfg","tlshash":"c232b0c06b54b1ae21bdeb755657c14a4a2ee0dc4014a9c9ec1e0f29630b873996eff4","first_seen":"2025-06-25T18:16:51.739552Z","last_seen":"2026-07-12T19:43:13.927498Z","times_seen":5,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/i5.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.101Z","timestamp":1783885343101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/i5.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495454-5522\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zul3T0Ug9WqL2%2FMRhlghnBW5TiCkb31IQiRftk3kdH5V9ldtWb4tZgMKuLSvienOG9CyVR4LbqAL1uUGffn0q4zKhbXel7Km0HN%2Bx%2BXIUshqzwHOwGsQ%2FUgtEp4v33fc9MGsPw%3D%3D\"}]}\r\ncf-ray: a1a287e26d7449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21794,"size_decoded":22565,"mime_type":"image/png","magic":"PNG image data, 303 x 245, 8-bit/color RGBA, non-interlaced","md5":"4a093b104a5450eff4518ecdb73b2a98","sha1":"f0d296e67baad365e48cd1f67290ddfe381e6104","sha256":"fcc97a87f7ff50c584cf4e7ff34d85fc748ee14cfbff7f8c191bba1a4789ee97","sha512":"9d35a6d15edd3d1e9c6fd47bff028c93c8d361f956ec7500d1ffaf3ab9d266215b6e6ff23753ced73c3b963d20e9acbdbc82e64ca44466ce295dedd1d6c8de58","ssdeep":"384:who18SzzROF5iSJfDtHCiTqdm1RyPpPq19pW7u9cJFdbbVeN9MnVXbwCMH0pNVq:w28Sz1OTiS5NGTPqjpWasFZzVbLMONVq","tlshash":"5ba2e0929d4e1265e78cacd32cc7143a68ebb117c7024286b3a5a30b7d33b186cb70b1","first_seen":"2026-06-28T11:26:24.403885Z","last_seen":"2026-07-12T19:43:13.928861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l1.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.119Z","timestamp":1783885343119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l1.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495455-f7a1e\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ai32tVK1ybZeQQr%2BpdRjWRE47o8Vg54mlfEIFD7hfhG043ZZx2aajqZGFLLqOXOl55tc9CC1kZl0RhEd7fouXicbmlWAcs1sh%2FuyW1KoaWLYoRH%2B4PbrN1vyjfK31maqsHNMXg%3D%3D\"}]}\r\ncf-ray: a1a287e28d8d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014302,"size_decoded":1015226,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1707, components 3","md5":"0bd9b080efa1e45d2c5e317e4b32a658","sha1":"5ab74d8add4447d7ed670cf38650d4d73f6e43c1","sha256":"9dcd1d3a6e7700e1195000aaaf4f14c46e86147c6db0d75c5ede5fa1e214db3c","sha512":"806eedde91311cb5277f4c95605595816d1ca4e4f13f7893b9604d4ef0d33a40b50d4e5c4d667115e70e42be8646c43663f50fc3e691a957c64ff29ec511860c","ssdeep":"24576:oKlHrrsJu5xVrM3pLDBKplW1u+XRaUW8CznpnHi6jRdZjSm7I:bp0kzrM5hKtWbCzpnCODdSiI","tlshash":"892533f114f6cc61dc91fbb2571eb5ab1bbccc230ea456b49a0211f627d60935bae4c2","first_seen":"2025-06-25T18:16:51.70694Z","last_seen":"2026-07-12T19:43:13.930161Z","times_seen":5,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l0.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.120Z","timestamp":1783885343120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l0.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495455-1cec\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvdhCdmr7FkTNEtK4z27nGPjkbw6lSH7TDXpqbawGXi5Q5oogPTECCoEaG9SIUYwsKx5O2Ncwq4eVVk5eLyRe892IDR8SQ0LQlVwDqtwpcaJ1YYRCE9WNBZA%2FeY8oze9XP9Wig%3D%3D\"}]}\r\ncf-ray: a1a287e28d9049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7404,"size_decoded":8169,"mime_type":"image/png","magic":"PNG image data, 144 x 180, 8-bit/color RGBA, non-interlaced","md5":"442b7a930c2c76683a9177a5323f57dd","sha1":"9cfd06d2ee4c7a7fbafd01fcd0cc832687734365","sha256":"47564658f39bf9fbd055b85b3270394536b8acc54ee472cada25659ca7d6af7b","sha512":"5fb7fcf38abf81042653b67b9ca6534c85d08683cb242fd2dad3f43bb9d321d2e52dca96b8ade25f5829ee1b56c45aac0d2ef9a61e12d9df90093f1d130f9f65","ssdeep":"192:NmYmdJfEzbyEJlGRR6XV6ZwFn4BofCjx+dHY6AVvcfoYhvqA:Nbm7fiRlGRR6FRFnAoKjx+dHQa0A","tlshash":"72e1ae97ae78aaf46c8ade0c3932e0227f3761c87a5b7189400164f77572ce3e40954f","first_seen":"2026-06-28T11:26:24.411836Z","last_seen":"2026-07-12T19:43:13.931205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/q5.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.118Z","timestamp":1783885343118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/q5.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545d-162c\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAYxXcmHDX%2BdamqRzioLBNWzLqAZIvNNsV2Au2aCIqSMbiG6eqYsg9gWhJi4wjcX8Yji7eu6ggEVvETP%2B0B2rDQ5ramaUytoqyDO629zr862Q%2BCNO7e%2FmIlX6UGICK9KAkPKrQ%3D%3D\"}]}\r\ncf-ray: a1a287e27d8c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":6447,"mime_type":"image/png","magic":"PNG image data, 150 x 180, 8-bit/color RGBA, non-interlaced","md5":"2038ecfe1ec5398f7af89f958d495d97","sha1":"98aa9203b58aa281e03dc99780a3448a1806b4f3","sha256":"b3f01122325000a0e0b1bac224a48defb52bd381e4ef5a1d17f270d0b905a3b8","sha512":"2f8696f0226d7f9c6d0533c97ffcaa66f370fe77ae954e4d6d30501535b012b74d7a5a679680e22201b41c45d181ca43c5412bca15ea2f568bff7d08d83c4339","ssdeep":"96:+vHYPUxoB2/emV1RwbHkS0KNCQihWA4gyv+V6v0PhEfdkfJzLsRiQo:+fYPUW0/emHRc/7dA4gyv+Mv0PCfifNL","tlshash":"adc18e0bded17affe1d86804d0ff57aeb5ef4e54d0a2b142d646c02f1612482b11d58e","first_seen":"2026-06-28T11:26:24.361867Z","last_seen":"2026-07-12T19:43:13.932435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/static/js/main.06e347ea.js","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:22.508Z","timestamp":1783885342508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /static/js/main.06e347ea.js HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 18:43:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a495461-7efd0\"\r\nexpires: Mon, 13 Jul 2026 07:42:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F93dsZr4Bw47r8JJ%2Fb2oVuQwS7%2B5lIykG56BxmYUbx8oe%2FCUQEhoyjoF05RDVdbI%2FYHGGCIcW3zy%2BkS2C3fOXMR%2FC0TxCRacS6z2%2FNrvvRP8Yz%2FUDDKyd0V553rZ2thToG4rSA%3D%3D\"}]}\r\ncf-ray: a1a287debc1549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520144,"size_decoded":164782,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"a38ae308fa8496f3eeac7ce3e366c956","sha1":"4faea91541e1a0a167306860ca197f2ee2bd9b99","sha256":"ea6685c1da127981718fb5737f1e7b672f3079db17906870ab31093bf02828af","sha512":"30a005877e216c3f7619cf711a3d21fc176eb8e9b82f9ff94019824c898b51e29ee82e4a8a9c29d21487c3144aa27902212b21814a4822bacb5a2f69b144d5bb","ssdeep":"6144:M8VuiiTVmAD0zeG7wApFAmLOMW67NRzpFgIjkQUBzl6G/R27tpTRgAWv+gEB7I4A:l1LOMWMNzF3wlzl6G/E765","tlshash":"d2b44d84b156ba6d7e7710f1007f0609f33d2e0aa80d88b0f1e9fc9e25995497277fa9","first_seen":"2026-06-28T11:26:24.398517Z","last_seen":"2026-07-12T19:43:13.933504Z","times_seen":3,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-12","alert":"Detects file containing Telegram Bot API","trigger":"krkahrtickets.com/static/js/main.06e347ea.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/c2.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.124Z","timestamp":1783885343124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/c2.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542f-1f68c1\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAX%2Bd4u%2B3CQ5BX%2B9oCZBmoAEaOsiJ1XUl5EzICSH8kiyzN85SiF0tyK35mvMulOY9Fq0ogvS1GqT%2FCYCxueBzFVa1r%2FDwElqavybVWIxoufj0k9OluSW3s3IysUWhy3cKsB%2BQA%3D%3D\"}]}\r\ncf-ray: a1a287e28d9549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2058433,"size_decoded":2059244,"mime_type":"image/png","magic":"PNG image data, 2000 x 1334, 8-bit/color RGB, non-interlaced","md5":"c2fc724798f902640a83da383b1c5886","sha1":"6f2dfa5800263e3825e45bd2d2e9a781ba85179c","sha256":"6fe6051c1c8e3e300d8e6275ca36ebbf328a1ee7d7f12a1487329f10280e8730","sha512":"2cdfd76c4db5ba50689e4f0f36ebbfd6a2d9af6af1bcd60133240fab87f24bd739696d6cb979c75fbed6e9141523e216b885b9c14a19baf5f0fda0a42119f683","ssdeep":"24576:HTNmkYyAd2ae/DAB7G7zAX20VTxJBzlJpG1+E1MCpR:HxOd2hUB7G74DVzBxXuTR","tlshash":"8d25332d9e089ad32c5f1a175f3c789b012a583a056eaff0f5cd2e6749f9185f84ec42","first_seen":"2026-06-28T11:26:24.409177Z","last_seen":"2026-07-12T19:43:13.934623Z","times_seen":3,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l5.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:35.145Z","timestamp":1783885355145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l5.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495457-1beb7b\"\r\nexpires: Tue, 11 Aug 2026 19:42:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cn%2Fr0IZHCvj171r8nFmdPnxRwY4HVWWoUxmocdBxwuTbP1J07vQeszjte8BSaJHbxoH8lgwxe4loTyDnDoKffLIG0CuQGSKnpkZyBx3o7N4%2FXcq%2F%2B7UfeNjzbY%2FScKEIwcQJ2Q%3D%3D\"}]}\r\ncf-ray: a1a2882dac7549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1829755,"size_decoded":1830933,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1707, components 3","md5":"d62a0fd76a5cd5d674b503de43eebc16","sha1":"7ad75a8ae36b2025f6e92c5434bd7b1543e11903","sha256":"4b828ae801409ebffe3072711fd3751735495e96a3b194f9b4fe50f04198dfcd","sha512":"e97765afd96d77c480d23d9760e9106cbce65c485c0edcf748020200a77f0575ec731182b6176e3247be5e4571981931743d3b337a6f32516b3a39691466a923","ssdeep":"24576:EvDxajt9s9vbyRASwMiB4tWYhlhCibKKx:oVl5GRASoOtWYhlh1x","tlshash":"c525233d8099727b9c33dbdc8aaf46312296c4931e58a0339e2fc7c923f976715226d5","first_seen":"2026-06-28T11:26:24.414583Z","last_seen":"2026-07-12T19:43:13.93576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/i2.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.090Z","timestamp":1783885343090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/i2.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495453-4bbb\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zg%2F6kJjy%2FtPVE7ufH1EjJEF40UytdJMY0OQ7eB5FLtlAiYPc%2FZE9V%2FViRn6QOiRNplpSJjFR9yVSoNAc%2F%2BQOisR534KCpKhR9ZC2%2FeB0TVn9VoOwVdderWYaEwPzf5ce7j8HFw%3D%3D\"}]}\r\ncf-ray: a1a287e25d6b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19387,"size_decoded":20164,"mime_type":"image/png","magic":"PNG image data, 227 x 225, 8-bit/color RGBA, non-interlaced","md5":"9e202aa0c07bb2f972a959022cdcf89a","sha1":"74f81561d78b28f2d9577912bc0c9b0617d44394","sha256":"bf3d38000ec1eebaed2f926cef2acda879d5593f31508a59c2cce37a9f69089f","sha512":"0670ad542d48e65d06c5de6c07f906e41923c5bf00b22fc499665f77d6b687b2d8eb8eaa4da942f479e1c30f916e5c098a251c84ffaf02e068578fd78b6d83de","ssdeep":"384:MP99gzNa9xocoj2rsUkhxGZNgHHRj3cdy+ACFyDUI6wbHn98BWqSqUT:89voc2UhvgdH5CFU56kGbSHT","tlshash":"0e92e07494b377dcc9267e5478028d7f9e02ab95a6469607b838d20b93d2bcd41d2e12","first_seen":"2026-06-28T11:26:24.415431Z","last_seen":"2026-07-12T19:43:13.937043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/c1.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.123Z","timestamp":1783885343123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/c1.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542f-759c7\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLU2cts%2BiI8d3cwR4LrFmQu%2B4iOEkVHixuumcB%2FNigKGMiQ2mHefG%2F%2Bed7LRsI%2F4UnlzeTP1ksmNtWwJbmk1%2F%2FAXqZNpVXu6eRc1mSPmO4%2BKSdXOLXbpJoFoFQZvhoVo8zV2Kg%3D%3D\"}]}\r\ncf-ray: a1a287e28d9449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481735,"size_decoded":430150,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=11, manufacturer=NIKON CORPORATION, model=NIKON D5300, orientation=upper-left, xresolution=180, yresolution=188, resolutionunit=2, software=Ver.1.00 , datetime=2025:04:05 10:13:35, GPS-Data], baseline, precision 8, 1500x1000, components 3","md5":"7838badc8400f87dd725bae99bd46f08","sha1":"32f84859a88d64f75bc7c6574db6a49a1c80a8a9","sha256":"589fa35d2fd6a5009e8e9be4d85d9d50e155c8b029db7ebfa1f96fb6cece460b","sha512":"693b129362187ffffd5e2aa37aca8c0ba9adf6e630d6780328d82f1e906b4f9014bf33a974cdfe889d07653535f4614977e767367c6fe0b56c1cc8644166afa1","ssdeep":"12288:UiWHgb+HANe/heDC0TBjYORs5GrkLmmQFZiy:UiKptoaGgZKEy","tlshash":"1fa423249210498bef76233f99e506a67551a7e7704da2b2331f8271ef27b576ccb803","first_seen":"2026-06-28T11:26:24.388474Z","last_seen":"2026-07-12T19:43:13.938415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/img.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.086Z","timestamp":1783885343086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/img.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495454-f676\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2tXK5WigDptB6PHt4mBQaPqlcDFdxJ4PH2mBzOgDzOcV2B%2FwUrFydetE3%2BcHlUTqZcyNcPR9Nx3mvGkFFnL3GfQRxSPagmggutO6wSmo9sURnM31HM%2F3b%2F5kt3b2zwuFXlDGVA%3D%3D\"}]}\r\ncf-ray: a1a287e24d6749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63094,"size_decoded":63518,"mime_type":"image/png","magic":"PNG image data, 1171 x 118, 8-bit/color RGBA, non-interlaced","md5":"ea0ed1691f8b10adb93ce6ec4b8af95f","sha1":"cdafd2a4ce7448140d6c24accbb7bcef0e97397e","sha256":"6e9807bd522fcde0f9b88c1b386af4b522a9cec9716832cdd7eacf50c38d3208","sha512":"9efd338a230b13135bb24b45468197077a438b2b2470cc9f1c804f68ecc43b605718c5fdbfb7c56608d24d2e7a5f95c3e6a1a55f2fb8d0844646cd5c3766fd9b","ssdeep":"768:fAWLtBqsQgUlvf8HkfgQbmvEXbbVdp35E7r9HaUrF4G/F2skXTBUDLM/mdsdxv/G:3qsan8AgQvf4RVh/sZuM/b/Rt4FAPeMe","tlshash":"43530224498287eb1df593c352e8b85483503ac1bb9ed85a0de86f2f691e27bd4d4c1f","first_seen":"2026-06-28T11:26:24.354512Z","last_seen":"2026-07-12T19:43:13.940749Z","times_seen":3,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/roskislapogrliceop.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.103Z","timestamp":1783885343103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/roskislapogrliceop.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495460-3a470\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tp3yz%2BN4yOEnJDMluGKAUmY59bkp7At4TUeZ65TCBBjHalwe3n0a6bFLY9BSw7j0uKh%2B9BGnH12oii%2FWD4ew3IjucRjwdq5cSB6%2BDs1WsCqAlcvsLYKOOZCXVGzG4pl4OmGKBw%3D%3D\"}]}\r\ncf-ray: a1a287e26d7649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238704,"size_decoded":239391,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 80\", baseline, precision 8, 900x600, components 3","md5":"712a35f420290dece127648543c586b2","sha1":"8666aae3f85d71ff5ae4840ae2fd64dfcc5e8013","sha256":"5cb7755d34be833be35b711e9364d145af3f4751761d0b758e91e129ea848342","sha512":"609c1a6ae001aa1542731fb32c1d3747bf2021dd5d66c7ba0082d5fe3090e50b1822e2a08d812cf3980741d1cd1c71799f33f61083fa3cb686f80bae7ed6b369","ssdeep":"6144:yNblAPU1vSbP9dhzJg8uv9P4ZoPV3cHxbK0RFKU:lPU1vSTdHZotYxRFKU","tlshash":"503423beb51f1cae117f85ffd5cdba6eb49e50bd090edc2e6d00f89682120785d26248","first_seen":"2026-06-28T11:26:24.405845Z","last_seen":"2026-07-12T19:43:13.942083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/q2.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.111Z","timestamp":1783885343111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/q2.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545c-2483\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5%2FJ22wWpXIKERMC4XXE7lEssbXfM2L65Y7pBb6UUJzO4RqUUaQuQLQhJB%2FCwmd1W6c9roi54O8gLAO7%2Bd54iIwITip%2FQ4XZSWqMCbqvYpgQ6vGR8ZzslsdIAHUaGbLREoneug%3D%3D\"}]}\r\ncf-ray: a1a287e27d8249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9347,"size_decoded":10118,"mime_type":"image/png","magic":"PNG image data, 120 x 181, 8-bit/color RGBA, non-interlaced","md5":"c19ec0ba809fc8384c175eba4c8958a6","sha1":"42414e7a0860c385c23fd6ff10acea443145198b","sha256":"b012c30edf25b6992275cd525a3083d033009c0da3c507e8f33cf86caa75e478","sha512":"c3e0d81f76baee2e9f8c3c1229385c3df65c30fd65979fd3fa4bd1280a5263b9671d549a485cc910d096fcef12fa5ebc3c549e49e639ff52384a3f14f1e20565","ssdeep":"192:lz4+JsKvEG2tdINj9NOsyZNI4Y4N3VQlsG6Yby2Go6hEsFIUptlmQx:NRudJdu5NONZKurYbyvjhEsFI1Qx","tlshash":"43128d0752052ae399dcc1fb18495dfcdaa549c633170b6c3ea0f8d31a1551d6e9ee20","first_seen":"2026-06-28T11:26:24.392007Z","last_seen":"2026-07-12T19:43:13.944315Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/3.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.112Z","timestamp":1783885343112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/3.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49542e-e2b10\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DApldzByNoAycfB1x8PmVV7ip25GNV9iwM52Zy4ddpNVTvHN%2FQ3J5XxacQkqi%2F2WwwjsBxizDHfKpZWxt7E2nUQrff%2FythAYVD4GCIgmflKVdFMOem7le3TAFzq3OyIhc%2FwFw%3D%3D\"}]}\r\ncf-ray: a1a287e27d8349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928528,"size_decoded":929423,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1709, components 3","md5":"86d3cbd0f3481f2f9e73091b93a8901e","sha1":"a7cf360331eeabc8e308091783fa9ef31007109f","sha256":"c9cd092b307e228e53a1a38f50b52701e01861ea4f173a91d9611535c9b7370d","sha512":"57f346040720bf174d065bb3eeeb8e65fb4d512b55e285217febd7d2d9e0fca09ff6d773825b9b8c88a420a0017880c848740eae4a2c2510db2d8a93c73f15e0","ssdeep":"12288:1Srml+4sVRRiP3OY7NUIFdEarWmiTpJopFfb9N3RJFmk/Q6DiB5G0xo15v8o:1+mdsBkO0NU13nSBNgk/Pi7+Dv8o","tlshash":"e415332c483ce7740d895ea54f7b7a0edab09351bc46be874312ad4c1a3b1752f1936a","first_seen":"2025-06-25T18:16:51.730379Z","last_seen":"2026-07-12T19:43:13.946171Z","times_seen":5,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r3.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:29.145Z","timestamp":1783885349145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r3.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545e-d152d\"\r\nexpires: Tue, 11 Aug 2026 19:42:29 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egaMfCOnX9eexKOUJZq56lOZO0bKGNPRThxWqcLj%2BUaEEqx8wR0%2BsbGtR0xKo1cSyAwPah0RWPo%2BZd29fdJDKNepD3qcgQptozCu7fodtXwOK75rzQyOK2Axaw6jgrmEjblRoA%3D%3D\"}]}\r\ncf-ray: a1a288082cef49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":857389,"size_decoded":857768,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1707, components 3","md5":"06d4e6a98ca31db3b3d03b935bb62c16","sha1":"f8d659d08c6d432c2a3da39e52f61b5192c71ed9","sha256":"a91759d1d904824e5c9d6bd63ebb5cc7eabcb13a4e91c6c1bc1c251ea8c9fb47","sha512":"d61bf845c81655459032540f8d0a1f0878fb6293a11eb6aa270c8d1aee7205b6f7990fb32e6bc64495b2dbacacbd5a9b15e3db13605a0a5ec96c3a5040a7430d","ssdeep":"12288:xnapTRDF6T5VmHnACvszsfxDAZ3y08OgBDaNlEfvbsa2yI8YHoNgyGTT2s8Oh6M:AdRDATnyAVnZC0CBONl+bsaz8oNEqpm","tlshash":"cf053313639dd7421b26cfa1f933c087ac9b8322c9e84d972548c6e77997afe0c945c8","first_seen":"2025-06-25T18:16:51.723734Z","last_seen":"2026-07-12T19:43:13.94766Z","times_seen":5,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r6.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:38.142Z","timestamp":1783885358142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r6.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545f-d3a57\"\r\nexpires: Tue, 11 Aug 2026 19:42:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9b10WEzAvGESkMBrhas2fo96u3wc08sKkUBcgVDhz%2Bbip%2BU38ozNNXMpJ3yixX05kheda%2By6xmVZLuCSwVWErcGC5WaDYcV%2BLoy2Qiqp5io8u3W8hEXpg%2FdA5HnrJ1k2bymXKw%3D%3D\"}]}\r\ncf-ray: a1a28840683849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866903,"size_decoded":858723,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, description=                               , manufacturer=SONY, model=SLT-A77V, xresolution=170, yresolution=178, resolutionunit=2, software=Capture One 7 Macintosh, datetime=2014:10:24 13:19:46], baseline, precision 8, 1500x1000, components 3","md5":"9ec80dd791b217a758c8a9bd169acbae","sha1":"750678de63250b447f09380446df13efd449361b","sha256":"2ae25de00a5c2c798ebabf2e8d17d821c421ef38886ec879b491893ea7f6c766","sha512":"bf1107d866f11eb6c7f7bf98743cd9499307d071d333464fc79fdf97dab63e09922f1f81f1b67d110dd280a88b4019c26bf1e1fee2451e392e6084c9998535ee","ssdeep":"24576:JXYIjEI7ddIWFBDsZTvG/8GbFhemFg1ua:KKdvFGhvAphemioa","tlshash":"390523e6ee121746f47e027b5c8f863fa3e0676a6a16e18cb35d562bcb49d831003c65","first_seen":"2026-06-28T11:26:24.353659Z","last_seen":"2026-07-12T19:43:13.948915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l7.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:41.141Z","timestamp":1783885361141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l7.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495459-95321\"\r\nexpires: Tue, 11 Aug 2026 19:42:41 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzZe%2Beyzneu4btT85%2BMAofyHSC5ccSG7jLct22nHS%2BbmUIUNwDADGcxRGcRdLF3JVBJYD8qNt5q1RVkpovd39pP00ZQUFb4Q5S9zDIoIH988eNZNoxQvU%2Bu1Ms680rNt3FxojA%3D%3D\"}]}\r\ncf-ray: a1a288532bd549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":611105,"size_decoded":594793,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1512x1008, components 3","md5":"97813aa616ce67dc40d158f252bb8ce8","sha1":"4dc7cc0e59c20add5a447a6b8e6a6cf7f3b39fae","sha256":"bf3c6709af5beb0462c48e4a7c92da6b13aa5a08436ee69f8982655dbc139d27","sha512":"cb136d7df3f9b85551e9f22e91cd1d36cd404b61e076e36cb349b5695a01227b27923aa95f26bbcbbf3ef8003bac42d00051c9c8dae7745137283331e6f461f8","ssdeep":"12288:U5z5WZy6YtTnvenQEaCm+jL33VGBRlitQyStuWJ+bBU5BKzPgsCh9tIxlE:1r0TveQEaCm2r3sYt3dCeU5QlE","tlshash":"c9d4233d35eeca306ad13c5e9626dbdeb1d6e2af44eb9b8c5c444dd32f29a40b04081d","first_seen":"2026-06-28T11:26:24.386043Z","last_seen":"2026-07-12T19:43:13.950089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/q1.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.109Z","timestamp":1783885343109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/q1.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545c-38e6\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i15PR1Qz6tBbnjbFynUh3l1whaOad9ONHhZaT9mD9JSqjw%2F10JJv7IN9d8EFhg%2FEf5mmWARg4QIlIU0yidXFDEknqSEwvYni%2BmaGv1y%2B59VafIzTkM9%2BEI3ugrnqX2dLb5Z2oQ%3D%3D\"}]}\r\ncf-ray: a1a287e27d8049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14566,"size_decoded":15339,"mime_type":"image/png","magic":"PNG image data, 239 x 157, 8-bit/color RGBA, non-interlaced","md5":"2eb22474b3f338cfb568ddda76e07b91","sha1":"5f0733148f48dbb1c3ec7e3e4de19b43e0aafe25","sha256":"1908798e39ad99a2b8dd4bbf7e77dd61e8a054727f81e771d612d56b9366a30c","sha512":"a10ff255a0857f279b1f488b2acba3d14ce40ea58ad8223a8ec9cb812103f71c48f520a6dc81bd84ae5003d79658def9504433533c5d28a70e466792676d2153","ssdeep":"384:Ah9mEZodidVXUQElal7FWpkM67jIzF92LHSHrilDb:wrakHj4al5WKM6ctulDb","tlshash":"fd62d014dcb9af62d7f110071964af988c886860c48aa44a622f9f3d9f570c53ff7ad4","first_seen":"2026-06-28T11:26:24.400409Z","last_seen":"2026-07-12T19:43:13.951061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/c4.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.126Z","timestamp":1783885343126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/c4.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:42:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495430-31b56\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCjTrTOENA4WKIndsS7ubE4s9oSyUgvf0phAg6toNdfaR36vZdYjf3%2BO%2Fsmx8Z5Nfsq4fY4%2BFQ7smM12oEsPnJLJum91R7btaDQZNMAJiiqI5Cm%2F40qlRPKiWRRXREg0G66rQA%3D%3D\"}]}\r\ncf-ray: a1a287e28d9749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203606,"size_decoded":203313,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, manufacturer=NIKON CORPORATION, model=NIKON D5300], baseline, precision 8, 1204x735, components 3","md5":"e4cedc156c5b1c363fbd8a44c48cfbd9","sha1":"067aa6eae811ffbb800a0359f9c4ec4befeccb7f","sha256":"d9465f16a85cd75acffd031533b6bf4cd882b8d5b5b2cdb59f8e3c17f80fbcd1","sha512":"b0f30210a993ec37e7120f517af7f2ca8d7136a3098c1d95afe81b805768995036eedf89ae92d889d6410d2f20bdcacbca17161812d10ab85defe395ae1d3c8e","ssdeep":"3072:TWhE/Na5iaGDVOGMJoS62VuGLwz3hCWCaPw8+yvVbiyvgsRqGNUmUQIXQ:TyaaEkGMJoS4GQ3hCW/wG9biy4oUQIA","tlshash":"1814125e8ac6854fe8865776d0e5dc6b3f83c8438cf11e5f31ecd21643e7b69492888a","first_seen":"2026-06-28T11:26:24.403131Z","last_seen":"2026-07-12T19:43:13.952038Z","times_seen":3,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/f3.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.129Z","timestamp":1783885343129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/f3.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495431-4858\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIeT6Vq05oR6r0SbPYiuYUID59It8TF6IZvG9n1GlF%2Bm0MunYM5G16I4XYvYE5k01Xag30U%2B37xFSMlCLdR8KoLnyMfDoUFlOINlBMdGonnI8l14HKsV5MFECwWmvq2OYJY5XQ%3D%3D\"}]}\r\ncf-ray: a1a287e29d9a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18520,"size_decoded":19263,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"69004a4fcf4424ee7e0c08bb60ca3e35","sha1":"eca4e2da574fbcfcfe465b3190d2b6f0b4c0ce51","sha256":"33c13e546071986c93be79b608287cb8012bd5eda193912015c5c13ae7027c5a","sha512":"c9e9bcb2fd82199fc5286c3438f18fdc3989e5e3cce910666ef4d52af65c24bb3fbfa8bb5892dffbe5fce933ad8de70223db4850ed080f5c362e8f524f518510","ssdeep":"384:2KpNyNxv2sUk2nYxN6UkGFW7lBE+SIj11+wIoRqns52:lIzv6kfN6UgnE+SIiwxn2","tlshash":"ce82d1c2e4e36d180976677e3014d398fb5376b2c443ba56b4bfba8b8d847f28155141","first_seen":"2025-06-25T18:16:51.781142Z","last_seen":"2026-07-12T19:43:13.952955Z","times_seen":5,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/l2.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:26.141Z","timestamp":1783885346141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/l2.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495455-2ca6f\"\r\nexpires: Tue, 11 Aug 2026 19:42:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBGCtI471C%2BjsbOb9PmzNifRLcO9bzi9y%2FfeTQiiZS7jI3HkLSmc3hLHrin8YQJRU%2FoTcVh9ZyNV%2B5ZuME7aJ265oeuNrym8TTwRpL%2BaDjP5qqp0SlHTtwN9Mq6MSRsrqWCT%2Fg%3D%3D\"}]}\r\ncf-ray: a1a287f569cc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182895,"size_decoded":183606,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 800x600, components 3","md5":"59ac4e60c34442562da897150778a040","sha1":"31a392818d92292b7e204a2d54c7ba5379ff64b0","sha256":"d5bf453362f31266c00f618d710975c9b1f1d1d01d1f22badc208bc54cbac5ab","sha512":"442cefa0556ec648e61472d42361f2323ca65020e01d3dde161643df88018f65e3799f4d0d19b141751dcb10b185ae4708c9edad4e740fd6f8a770047892750f","ssdeep":"3072:ezNVBlXKoFjR80DTEw2FGFvjDd1ykrkt/Z/ZJRPiy3D46t8/q7GlBJiBAObJbRT:WdKoBR803WVth/fIyzMSGbcSObVRT","tlshash":"310412e19b0407f056ce1fd921169a46d3d8852e2fcdf6a0bcc85139841d4e76b6ebf2","first_seen":"2025-06-25T18:16:51.757932Z","last_seen":"2026-07-12T19:43:13.954076Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://rezervtemka.cc/","fqdn":"rezervtemka.cc","domain":"rezervtemka.cc","tld":"cc"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.179Z","timestamp":1783885343179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rezervtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 01:02:50 GMT","end":"Thu, 27 Aug 2026 01:54:41 GMT"},"fingerprint":{"sha1":"84:1B:86:D4:E9:95:D8:3D:3E:C5:E8:58:17:7C:B9:8C:9C:44:42:7A","sha256":"CD:4A:F5:19:CA:93:0A:5B:32:16:6F:17:3D:77:D2:2F:E1:39:03:65:D2:EB:9B:ED:19:2C:73:A4:F7:5A:5A:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rezervtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://krkahrtickets.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: r0cKMbwWJMZ8mQz+wwPdpw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 12 Jul 2026 19:42:29 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 4KS7Ac7KD5Vhj0oFZiZAyK+zJdI=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9dTs4%2FY1%2FmIjvGtXRQlVTRTHWQCSprMYetjr6lJ%2BIwUf%2F8k8pmH3vAIroAWgIVWY7jZVaPc6B5ThkbRkFCsv8kSUYNpzh5PuFefKW7758fBZWJd9UO%2BAvngM0xH8Ekq%2Blg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a1a2880aefb756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=975\u0026min_rtt=966\u0026rtt_var=289\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=3195\u0026recv_bytes=1320\u0026delivery_rate=3642023\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=5ce7ddc873a6a33c\u0026ts=82\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":815,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T02:18:32.815563Z","times_seen":17253256,"resource_available":true,"data":null}},"time_used":12844,"timings":{"blocked":-1,"dns":6390,"connect":6369,"send":0,"wait":74,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/r4.jpg","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:32.153Z","timestamp":1783885352153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/r4.jpg HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 18:43:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545e-cee2a\"\r\nexpires: Tue, 11 Aug 2026 19:42:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FyHrppfoQB1u9xx2lEGVubNkW9N1uM9%2F2tZO8N%2BX%2FdfKTZ7mn7hUO6S7e9LnET1Ch4ytQa6eQ6%2BWmEXFUuE7R6c%2BpvnpUaiNZXCDwoZDCb%2Bt%2FKWsh5S5O8Km9c8DtUi99hEYA%3D%3D\"}]}\r\ncf-ray: a1a2881af8c149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":847402,"size_decoded":848283,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x989, components 3","md5":"4890055e4e3bf5503553a65c394d09bc","sha1":"f4592e7c31c3a378c47bdc1bc46571afb66e0c3a","sha256":"e7d8f56c882cdd9613457b9b3cba2ef7d64544357ae869b6ae3b04f9f1eb914e","sha512":"aa601b30031387107d10ffecdd1dff552e314cc77176d2bdb190179da415c9c44939bef580932f0aebeb2a4250aae5cf270a0310e7557b4bc7904f3eecfb114d","ssdeep":"24576:/rg+7/sUk+dGEA/MUcZzi6tOR1AC+ByLY2f2Pg8C:zg+DsUO1/yFo1UgY2b","tlshash":"6d0533225a1dedfc34feed5b449f15012dc3e784792c8212fba3a66283d942c2ce5d5a","first_seen":"2025-06-25T18:16:51.803407Z","last_seen":"2026-07-12T19:43:13.955143Z","times_seen":5,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/i4.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.098Z","timestamp":1783885343098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/i4.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495454-2198\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMiQDnusWYBy9ZI%2F%2Bbqk%2BAYFhQu5YTdlHBRM9YyaZ9GBQ0YSyTXjALZKXlEkjYN8HR%2FbmdoXm9BEqn0ZTNI4M4ckXPpnj02ipduQK1RflPpxJZcEzabFMv6RXneGEEBGcthXzg%3D%3D\"}]}\r\ncf-ray: a1a287e25d7049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8600,"size_decoded":9371,"mime_type":"image/png","magic":"PNG image data, 169 x 225, 8-bit/color RGBA, non-interlaced","md5":"0abb3f5557cd3c0ae33c36146be7669f","sha1":"4ed0e5038665b67cc0b92bb7fc66adc6feca8942","sha256":"be3e70442873bbc8244505ce898bb9542e77f7e6dadc43620b6f503dff83f453","sha512":"1540912f080f08997e2b0345d0e2d810d8298b8f0f675c6cbc80740a0f4c26a7600f9d010ad1dae917bbeda467f9b41162e14e56b27a662f99b075d6caeb02cc","ssdeep":"192:aoafLHIp8g9Cth1wHAEvNPawWgAbkDJeOYt/rOI7yaTa:a3fLHIegEth1XKtJ9CHTOfaTa","tlshash":"3202af0f4a403e7adbd6515b7b336b0ca7693388297be20e9a1cc19d5274884afc2d5c","first_seen":"2026-06-28T11:26:24.39953Z","last_seen":"2026-07-12T19:43:13.95623Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/q3.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.113Z","timestamp":1783885343113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/q3.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a49545d-2bb5\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7EO7hpAiuiaF1PneJaYZEyR%2BxUqVxT%2FehXq%2FVyDPOVS4CW0AR9r%2B0T0BX6sttKjY7uD7CKHN3fgFQkGcJH5byp1EdRYN6K%2FbepMANRf%2FgZuKKUapHR91qwa5aUreTWAQj2WCw%3D%3D\"}]}\r\ncf-ray: a1a287e27d8549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11189,"size_decoded":11964,"mime_type":"image/png","magic":"PNG image data, 188 x 187, 8-bit/color RGBA, non-interlaced","md5":"de8f47439d27f0ba3e0406400d784bec","sha1":"0ab994fbcb6590257111cef2dba972edbdf4530e","sha256":"6d4ffc6a47ffd84b8b727520a3903ce932d83e7c62af011e97e540d7857f506e","sha512":"074a26a650f6f66f79fa5634329dada4684d51c6a633938159e196ccbc3b74291fda25f0ec8e7c72f72e5c426ce2afc112e5f439faab16e8633c9814db386ac0","ssdeep":"192:UOgMtJjf1ssKz9mkMf7jZEobSBmkENSfAPdtLy405S/GMsPKFbOg9:UOPtR1ywp7F/Nv1tLy405S/GJPe9","tlshash":"2b32bfc0902269b7343297bd795427cb01b2659cd0dad5c3a7e33ea0ad38ab8cb6034d","first_seen":"2026-06-28T11:26:24.396715Z","last_seen":"2026-07-12T19:43:13.957141Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/i1.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.089Z","timestamp":1783885343089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/i1.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495453-42d0\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIvuntPFLJ%2B0G3H%2B7jWSQCFsBBl6QkeES91Lf8EM87kRvcnNW96VfPwWIOq2lN%2B%2BRw1dbsA58Z9m%2BtGjSiDM3RjTRwNPq5RclhPUK1kwlQ5CcYdF2gVxyX9lpkYXVICregL1EA%3D%3D\"}]}\r\ncf-ray: a1a287e25d6949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17104,"size_decoded":17877,"mime_type":"image/png","magic":"PNG image data, 249 x 207, 8-bit/color RGBA, non-interlaced","md5":"cc83e5f3c9981cb66ea7fbafe75f1670","sha1":"4a886cb808284bb2f090d55ca44223db144e0491","sha256":"a26617bec26422945a61632b7436a4a64f05cf8cd7890ef4010cefd8bf48726a","sha512":"be6d5ed576bf4d3aa0bd98816bec78a160a3e436739bbb5fee1c825d0189d9f5f46e4c9b36a7da60d924e9ed67c6c34b28a580158cc33f998ce93a0f4f85c4f5","ssdeep":"384:fUAyn/tBmY/ROuTLtD/qnm+GkeiTfQPRJ0U5JEq5ylS5TEHHYqIks:UBdTFDSnPGXiqROU52qgSK/m","tlshash":"3e72e17243d3a69d1a4fd23c9911641bd00367954f8780b5907aaf15e6889af88f37f8","first_seen":"2026-06-28T11:26:24.360944Z","last_seen":"2026-07-12T19:43:13.958187Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krkahrtickets.com/images/i3.png","fqdn":"krkahrtickets.com","domain":"krkahrtickets.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krkahrtickets.com/","date":"2026-07-12T19:42:23.092Z","timestamp":1783885343092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krkahrtickets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 17:45:22 GMT","end":"Fri, 02 Oct 2026 18:43:54 GMT"},"fingerprint":{"sha1":"F2:59:EA:3B:81:71:4D:A8:CD:57:20:61:A3:B5:90:E3:FA:A2:39:EE","sha256":"49:2B:DC:A4:7B:8C:4D:50:45:10:4F:D9:25:F4:0A:14:7D:6E:DC:64:1D:3D:CE:BB:20:06:E5:8A:50:2F:28:F4"}}},"request":{"raw":"GET /images/i3.png HTTP/1.1\r\nHost: krkahrtickets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://krkahrtickets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:42:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:43:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a495454-21d1\"\r\nexpires: Tue, 11 Aug 2026 19:42:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4JbI7VtzKLkn1CXyti64D%2BJRJY%2BOt7kFuVA7pyvFuI4T9H0%2BKdm9%2BRtaqjrlLeXrNs65qb6%2BSlpxGG1gnGROi4lziGufKwtTe9Minp3YBmyU1QrUfioLqF2RyNXY5bsHOcxwg%3D%3D\"}]}\r\ncf-ray: a1a287e25d6c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8657,"size_decoded":9430,"mime_type":"image/png","magic":"PNG image data, 170 x 226, 8-bit/color RGBA, non-interlaced","md5":"551655790ae46070cffe1e42eb39013a","sha1":"1a659452073012496214a0a50ff9f4fb5e3cd4ea","sha256":"8dc8619925b54aa704a034dde764dfcace08e0f815703c0d63a95cd72a9e7f2f","sha512":"5097866630eeba2b28bf51f841c4f1edeab9af3b99fc55cac03b9142ab212d01f9e64ca0490fb58684b6367f4124b60803c3af6770c10483c09efad541cc1150","ssdeep":"192:Q7CCir0n3TBvv6ye4KF9lJN1m4y1fws9vGfENd:S/IH4KzXN1m19+sNd","tlshash":"f7029fd04b4ae3b5f772fefb33b5587a40035f1345ac0aadeea1e5100e192a4c65c15a","first_seen":"2026-06-28T11:26:24.395845Z","last_seen":"2026-07-12T19:43:13.959125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"krkahrtickets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}