{"report_id":"a919dd38-343f-4c3a-9b28-28c4a187db98","version":6,"status":"done","tags":[],"date":"2026-02-11T10:37:46Z","url":{"schema":"http","addr":"krakens-tell.com","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":0,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"krakens-tell.com/","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"title":"Download","dom":{"size":8388,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"326c2eafc99fb1cfd78eac99d5f96ff2","sha1":"60b9e17e1e0a9ec86821e4258fb22e29a52b4dba","sha256":"28a61de35263e741dc9a288e832817e447c6a87a7d64dc5ab330fd9c28c3f5df","sha512":"8378970667a8cd19d9a0c6c6efddb4f8f5483bb14f205198e83e1562cc70c7b3b3f2e7397417251c4fbce4f002b56be5a8f05e2711cf3ed39237946015e29306","ssdeep":"48:FSQGm7sfJCi/QG/Xezjrp7UsX/vJgugMOom2xCXQfXcQxxDQxipTXQojMd4Dx3uJ:9i/QiuzjrNU8dhOrCDkPFcuf8O8hrU","tlshash":"8a02ea5580d2a1330063919a5f265a9affe0810bda5f8e487afc4fd48f8bf19ce17645","dom_hash":"domhashdfd2cf4e3a04f3f01b4101ea1ab8e807","first_seen":"2026-02-07T12:28:02.083942Z","last_seen":"2026-02-11T10:37:47.457471Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakens-tell.com","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":0,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T10:37:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"krakens-tell.com","ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-11T07:16:46.280615Z","last_seen":"2026-02-11T07:16:46.280615Z","alert_count":20,"request_count":10,"received_data":361995,"sent_data":4966,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakens-tell.com/js/swiper-4.2.0.min.js","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"729145d59bc3814db2313b7bf0a6f386","sha1":"98d3e98e741ffe39a14128e024008a80a617bfa5","sha256":"48e701069baabd28f2bf099ff85f43d518ddc01883c7b6e87ab615946f0882c6","sha512":"1a7914a5f02e5200c9148cc0ab34a74a44459cd60c1a4825730b1148431d5684630fab51df6d96bfcb5bc3f42a6c78297f5384908d13fc51cae37f9f8127410c","ssdeep":"3072:oF/x7UOUK2855Z4HrJplV9Yyp2DrkHuerbiywQn9yBk:C/VmhvHrJplkyp2DrkHuerbiy9yC","tlshash":"ed143c0b67e52565a693b12b8e6fc500a276400b6e0afc9c3a5c45d84f6d83c13f9ff9","size":204294,"data":"","first_seen":"2025-11-07T10:28:28.757862Z","last_seen":"2026-02-11T10:37:47.466197Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/js/auto-size.js","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9996a60e40fab18fb12614ff3481079","sha1":"92749b47310579f4bd4f375e335480eb5c1a6362","sha256":"7a25c85ccb37654c52aca0359bc5fe314225a3a57b4f7c6b3e3278da8e7051e2","sha512":"f48a4cd306bccc6d9d4f609ec1785b53249a5db08d0962439adf0ece062dbc7660b5970fb41fb2f9d573bf2c77d03f971ff5cd3fddb5af47c8596d5619a9fbf9","ssdeep":"","tlshash":"b2019e667c412938271bc00d6526b25dfe77952627675083a41cdc795d60e42063ef98","size":738,"data":"","first_seen":"2023-05-22T02:58:11Z","last_seen":"2026-04-30T11:06:06.575127Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/js/jquery-2.2.4.min.js","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-13T20:49:23.1511Z","times_seen":294437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ece2888446bce67065b044f5d1043f7","sha1":"e5a6768c73e9db54166134ee93a97d6603d7c251","sha256":"23c75b3540f7f1a69155d1048692f51cc0c0536dfc57ebcf28baaf25193b08d9","sha512":"c4c50ef0bc6b6453906056d8ce6c8f486b078372e23eee51235c29dc9116bd2aca566b7d54709729e42b3573846a13c53dc9901a00e8a1de3cc092d40fb50b67","ssdeep":"","tlshash":"f151260df2d720621033787d0f1b64046eb3685b395ddc86fe4d0fd48f64b2a46aab55","size":2476,"data":"","first_seen":"2025-07-09T23:21:29.465591Z","last_seen":"2026-02-11T10:37:47.485528Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krakens-tell.com/css/reset.css","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /css/reset.css HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 13:13:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69849787-744\"\r\nexpires: Wed, 11 Feb 2026 22:37:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"4edb32cdd356a4688d74182789538f13","sha1":"e24d66dbbadb1af8c903dc243f1f27ef8431faa0","sha256":"74ea785a328eb920e3bdcc8976fc77d0df7f6ca219343b841af003d3d101e7f9","sha512":"84421d7d39b5ccd1db95c2ef2dad6a46b44f584e6c3a55c00a3f0a0ea98c2ba4f34c365bdb0f776e3246d6462372cafb3b9620499fec808baacc944e5a7451ff","ssdeep":"","tlshash":"ec31d0a5aa634d01a90b8b6827dfdf61361cc103480ef8b93bd25a75cf8b34d55e17ac","first_seen":"2023-12-08T17:36:41Z","last_seen":"2026-04-30T11:06:06.56695Z","times_seen":30,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/css/style.css","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 13:13:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984978e-2784\"\r\nexpires: Wed, 11 Feb 2026 22:37:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2de97834557ea7e5b579a09066e295f7","sha1":"bbf070b6657ea5f868706b9ef84bbe9823b62ced","sha256":"d3bf1bf6678f3a7b44246b9d2e1632930adf8a2eb2799416aba5c3f0d34a0cff","sha512":"2c438e398e8c924f839a0aee02f0bdeda53eec8433fc465ae4f44a3439976de009aa82baf98c52fe916137698e3d88c57b8a9e2abfef4f73c75aecb8112a1c28","ssdeep":"96:T+4yW/QmArL0lK4HPppQ7jPQBZYNstArQ/KIQVN5OEfcj9rLrYCOy1cNoxZcotXw:TzLw43emOynZbsWzK+ps9RT","tlshash":"6d22e36442e907486c1bc4513a1a6be1a39c80134d4febecbdefa4454f4ee96b4e23dd","first_seen":"2026-02-07T12:28:02.086464Z","last_seen":"2026-02-11T10:37:47.462277Z","times_seen":4,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/js/auto-size.js","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /js/auto-size.js HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 738\r\nlast-modified: Thu, 05 Feb 2026 13:14:20 GMT\r\netag: \"698497ac-2e2\"\r\nexpires: Wed, 11 Feb 2026 22:37:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":738,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9996a60e40fab18fb12614ff3481079","sha1":"92749b47310579f4bd4f375e335480eb5c1a6362","sha256":"7a25c85ccb37654c52aca0359bc5fe314225a3a57b4f7c6b3e3278da8e7051e2","sha512":"f48a4cd306bccc6d9d4f609ec1785b53249a5db08d0962439adf0ece062dbc7660b5970fb41fb2f9d573bf2c77d03f971ff5cd3fddb5af47c8596d5619a9fbf9","ssdeep":"","tlshash":"b2019e667c412938271bc00d6526b25dfe77952627675083a41cdc795d60e42063ef98","first_seen":"2023-05-22T02:58:11Z","last_seen":"2026-04-30T11:06:06.575127Z","times_seen":48,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/js/swiper-4.2.0.min.js","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /js/swiper-4.2.0.min.js HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 13:07:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69849625-31e06\"\r\nexpires: Wed, 11 Feb 2026 22:37:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204294,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (409)","md5":"729145d59bc3814db2313b7bf0a6f386","sha1":"98d3e98e741ffe39a14128e024008a80a617bfa5","sha256":"48e701069baabd28f2bf099ff85f43d518ddc01883c7b6e87ab615946f0882c6","sha512":"1a7914a5f02e5200c9148cc0ab34a74a44459cd60c1a4825730b1148431d5684630fab51df6d96bfcb5bc3f42a6c78297f5384908d13fc51cae37f9f8127410c","ssdeep":"3072:oF/x7UOUK2855Z4HrJplV9Yyp2DrkHuerbiywQn9yBk:C/VmhvHrJplkyp2DrkHuerbiy9yC","tlshash":"ed143c0b67e52565a693b12b8e6fc500a276400b6e0afc9c3a5c45d84f6d83c13f9ff9","first_seen":"2025-11-07T10:28:28.757862Z","last_seen":"2026-02-11T10:37:47.466197Z","times_seen":5,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/img/star.svg","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /img/star.svg HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/css/style.css\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6984e54a-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-13T16:59:36.290769Z","times_seen":319462,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":536,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T10:37:25.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 05 Feb 2026 18:53:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984e742-203a\"\r\nset-cookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8250,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2f711f3917ece2e4f093d792da3d981d","sha1":"ab53e351eeebcba332eea002fb90d2c0b526b3bc","sha256":"dc05bab33232c69929b6138772b8a6689ae591289cf150d3904cb35aa9c10e5e","sha512":"b3674c4d7263de50eab0b235165e1ce3569eedfb946a3583156bfb24bd39b1db4cd18e2b5aaf4b19f4f2b8d88453824051a3824dfe0339ef50ff2370e32efef0","ssdeep":"48:0bVSQGm7sfJ4eG/Xezjrp7UsXAvJgugMOom2xCXQfXcQxxDQxipTXQojMd4Dx3uH:0eiuzjrNUxdhOrCDkPFcuf8O8hri","tlshash":"f002ea5580d2a1330063919a4f2a5a9bffe0810bda5fce487aec4fd48f8bf19ce17645","first_seen":"2026-02-07T12:28:02.085342Z","last_seen":"2026-02-11T10:37:47.470527Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1526,"timings":{"blocked":622,"dns":58,"connect":277,"send":0,"wait":282,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/css/swiper.min.css","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /css/swiper.min.css HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 13:13:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69849794-5756\"\r\nexpires: Wed, 11 Feb 2026 22:37:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1470)","md5":"df1d5a1f61e960ae8b38c515e3cfe8bc","sha1":"e915826c87cd6e82a88227c4b09b6715943e1720","sha256":"7811ca4ce2a2754487f13adb75a8ae229ba1a4e663c41f912771d2c7a5b1300b","sha512":"72e17f8a5d6278f58e4fa2bdff114eb772019cd4ee53804bc0fa665c8f21f5e69d0af4676c7204d924e0776513c21013e72d9c26279728d41ec18cbf3fb0ce06","ssdeep":"384:QN8dDhqrSsa6KC1M+h0GZ3FOMF8sRBVx5dQ:QN8bsMWM+h0GZ3FOMFHBk","tlshash":"1fa2641c17132842ba3a4e1947ea57389724c8835e03ecfd37c1e948df675a8319fb66","first_seen":"2023-06-19T21:09:23Z","last_seen":"2026-05-27T05:53:49.330604Z","times_seen":19,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/images/apptb.jpg","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /images/apptb.jpg HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Feb 2026 18:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984e689-26c2\"\r\nexpires: Fri, 13 Mar 2026 10:37:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 459x465, components 3","md5":"2fee574425f8fb34a26831e7902c8703","sha1":"8b223b93b9038a5ec147a27b4af9c5ffc88d5091","sha256":"fb064d25c0d7e02ca06ff929101ab8da3d796aa43af7cad5429aaf2d9fac7997","sha512":"c91c60599b93940d4a6e37665e103504a202a01ea7bd908fdcad402aebe0c66da195c19cc887e077be3fd19b70f21c4f4e21103188530a0311fb6b658c260b58","ssdeep":"192:IDaNBljlpr2CPLjIMf7TnBzDDFLj657cZXEeWiiJ20VDn4fMYIapTpr9hPLPdGDI:I2xlpr2CDjRT7Y4CBMK+Mmv9hzP8DNO","tlshash":"2d22af625ba8155ec08926b7a4de0ec4f730b506516147f5e8c8e6e953c3dc21e86ccb","first_seen":"2026-02-07T12:28:02.088744Z","last_seen":"2026-02-11T10:37:47.481416Z","times_seen":4,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/js/jquery-2.2.4.min.js","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:26.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 13:06:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698495f3-14e4a\"\r\nexpires: Wed, 11 Feb 2026 22:37:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-13T20:49:23.1511Z","times_seen":294437,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakens-tell.com/favicon.ico","fqdn":"krakens-tell.com","domain":"krakens-tell.com","tld":"com"},"ip":{"addr":"141.140.14.45","port":443,"asn":53356,"as":"FREE RANGE CLOUD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakens-tell.com/","date":"2026-02-11T10:37:27.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakens-download.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:04:39 GMT","end":"Fri, 08 May 2026 14:04:38 GMT"},"fingerprint":{"sha1":"23:FB:DF:72:CC:C8:1B:4B:80:4A:A4:3F:9D:D1:67:A0:B1:2F:5B:2C","sha256":"DC:AE:0D:DE:A7:CE:5E:F8:96:0E:07:89:AE:36:FD:11:2F:C3:5C:57:E5:E1:05:8B:5A:CC:79:84:8D:5A:CC:B5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krakens-tell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakens-tell.com/\r\nCookie: server_name_session=1ddad390420e99044bc6766bf1c7c5c8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 10:37:27 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 13952\r\nlast-modified: Thu, 05 Feb 2026 18:50:43 GMT\r\netag: \"6984e683-3680\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13952,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 459x465, components 3","md5":"748f25583b6fae1a370dfbf5132bd953","sha1":"0f88963e0d6a0c80eba389c70d34931572cee7d4","sha256":"c034a7daaca915341227171303e08c9a0051e9488850dfb4170a0c11a375f287","sha512":"9544136947c4e979cbe1fe9f70cde195995c0d1d733e72260be40b6902b462a21f283ef29b85515208f59e0aa9c3ee1d6ebe53a5ccb140a83ee65fcce9b9ace8","ssdeep":"192:KgGN39OVyn6OtqjEhZNqNkGDx3j4CGyNd3kc31NndrDTPybIOVMxw0giFA+BOUG8:x1sBqQkx0WHFHDTPE50g0A+BOHowsjx","tlshash":"1e52bf866265aad5eabe0a3fc23c4cb20f2ba15c2d08c1ef551045e6fe1e7246e46d25","first_seen":"2026-02-07T12:28:02.09111Z","last_seen":"2026-02-11T10:37:47.484641Z","times_seen":9,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"krakens-tell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}