{"report_id":"afaf9ee9-3912-4116-bfe2-7b1d53d5361c","version":6,"status":"done","tags":[],"date":"2025-12-20T07:10:15Z","url":{"schema":"http","addr":"krab1-tor.ru","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"104.21.55.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krab1-tor.ru/","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"title":"Kraken новое официальное зеркало krab1 cc и krab1 at","dom":{"size":175290,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20649)","md5":"9e9985b3d3c7841f2f28429b46195b1a","sha1":"34d469af1f662ac6d1cad1fc07ef5c5ca00c602b","sha256":"7d96e4d60b950d3353465739aa509f48328a20900d6099872ccf781ac5c5f7be","sha512":"b00bcd4a7446af662bb639d1045f05ff103a95d7b513a787ccd3e83f767082f9911d17578aa0ef2a998c90335d5474716acfa49c5a4788194eee86b2cf50c372","ssdeep":"3072:2h+GzMGdGZnbjemlUVug8mLGTAq+5m+HWv5J9jw:ezbdGZnbjemlUVug8m6um+HWa","tlshash":"5104c560936c48fa385fdb5dc40cf71eb144ea65ef0a57d6b0e4e058a8c8db944b760e","dom_hash":"domhashda477ec8a06e76d7e22fbdffe81dfaa6","first_seen":"2025-12-20T07:10:20.627647Z","last_seen":"2025-12-20T07:10:20.627647Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krab1-tor.ru","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"104.21.55.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T07:10:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"krab1-tor.ru","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2025-12-20T07:10:16.304721Z","last_seen":"2025-12-20T07:10:16.304721Z","alert_count":40,"request_count":40,"received_data":1517630,"sent_data":18957,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab1-tor.ru/wp-block-template-skip-link-js-after","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"49e21c4add6c4905b5a79343fea00e5d","sha1":"fa7d0d6c08c2e3753aa65a338df38a7b498da27c","sha256":"7afe00519328c580f197fc9a063cb634720a794b59d9f6826eb066e6ce9334f5","sha512":"a12e3979d1eca340213202e8d0c98d015705715c4dbcaa93e8407a2e96b132323f1004da10d17e09e54048248a168f92b320f8eb898e56e057d4c27e752a5b7d","ssdeep":"","tlshash":"d24179d4f21506b40165293dc4385f89e2b929a8f6db1ca7cc0c9c1ca1b255f4676e7e","size":2179,"data":"","first_seen":"2025-12-20T07:06:13.931156Z","last_seen":"2026-03-28T22:56:40.261123Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/js/accordion.js","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf0ee93e9c5df3e2872bb9db3f16778d","sha1":"3fc234e6705f56f4a51c9a17976cffe1b5e4c7c3","sha256":"995f445e3a47fb381651366c1031f1f1eac58ad671f3e54eb456f7f4106de667","sha512":"346902491f0d6cb697dbee7142b14be973d2e3b21460ea98852efa64fd033bd686d730fa224a82cab1862b891ec22a0f00811d67e21de33c49e7b098e4ce9660","ssdeep":"96:PzeC3v/xpJrEIK6U1KtxfHhiF9ZH09MMShSi6MdU7PNYY7:PyU/xpJrEIK6wKtxfBiF9ZU9MMShSi67","tlshash":"4891a928a27024bb846f9266859fe3eb31617047e35c94493a5dc6ac13d8e7074f27f7","size":4303,"data":"","first_seen":"2025-11-13T07:21:42.245297Z","last_seen":"2026-07-09T23:09:16.862209Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb81994b14f0cef78f5c6626cf94edb2","sha1":"6934d37f0b09bd6f071e7724f85abcd3bd8e8fbf","sha256":"6c1108f702360ecae828bea59a982a763121e7e9a20013f0c430708cd4bba7f4","sha512":"5644760254127c9496189e1ef4dced8b8fa6f512f115243db1c4c38f0f2d93e520447d8ff876b11930339c81d90a88ca4aca32e98f42ceba5d8ff1b52518fd98","ssdeep":"","tlshash":"ebf020a63c894134c3b3126a3bb39244307d292f740f9d10f98c18913f8187218ab91c","size":557,"data":"","first_seen":"2025-12-20T07:06:13.932443Z","last_seen":"2026-03-28T22:56:40.261992Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/js/wp-emoji-loader.min.js","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"669738a3e8704c71fa95d02c04959036","sha1":"dcfd4677ab86424b399ef1a01835803c8f08cef7","sha256":"6327c9320c34f686186cefa3f609b7e12cdc1587ccd5d937667ce1eae5e8db4b","sha512":"5f9fdaad984416e3bcc755cc87544600c9ed17f0b4c64af7dbb5af51c3e507411dcb4d698853f5d09b43a2acdaa48df8b0af672cab93515b3f6c0e0e8f8859ac","ssdeep":"","tlshash":"b781859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea31418b5893c274a46","size":4046,"data":"","first_seen":"2025-12-20T07:06:13.933813Z","last_seen":"2026-07-25T16:51:27.379421Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-11T13:37:10.762382Z","times_seen":11713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","size":41076,"data":"","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-08-11T13:37:09.719339Z","times_seen":3660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/09.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/09.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67066\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-105fa\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO8hP8VLeuSDkq7Xhsg%2BW9zfku53PpcAB58ccPQ%2F1NFem0cl2l36vX7atJcSFJ1bllE8JKfPyUexqK1L12cXNRRnmMFTGMlOvtpowg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5a976b51d5d28d2405925dfa3b4e424","sha1":"ac088285d9f88047f7468b5956cadf544619309e","sha256":"c3f0c6263e378db37dec1fb9ac0511ed9203f8774a3197898ff1790329fdd84d","sha512":"069b4da0b1e0268a6b13c3a8e50dccd1e843c58b126c1c74c2dd55c3735a06dcee0a9e17a0e44ed691fd0271c97f256a7da9b6e46daa8c23ba89ed6503e60756","ssdeep":"1536:9JJfzuw2Afgp8e7FKvZB4Ibhg2MBD+pFPzfNWr7aqi:9JJfzuw2AgJRYPbLYDy9TNWrur","tlshash":"dc630226db1b9855cdbe7638e4faeb0942739738e36606513dbc940a3b852c5ac8f053","first_seen":"2025-12-20T07:06:13.914726Z","last_seen":"2026-08-06T00:02:12.584819Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/06.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/06.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44022\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-abf6\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2WKsYnfajYvmMDa2R0feFYdxxMi0kfq1GXqjRpoPJwDuQFiKTS4qQmN3ClEJpHVNZjHRygVur77ltlTdDaudz%2FogG4q4sBcWdgxmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd84783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"010c4de217d9aa924e37388f60bee58b","sha1":"7248d92ec3d998bf01a304ff169a3afc0655e00a","sha256":"239438d92204740b16401edbc8d31e1a9a7a9778a7c8a2dba446238f90cbb665","sha512":"2eaa9673db824911a67cf7565ab83e84f5df956ee7bdc140a75303e9a092a5405d2cc4bc79f05d739fa62c7e7c4f9326d8a97e19dd804ec58e256c48f2e6fdd0","ssdeep":"768:CYytYytYyX7U5LY0y8iydYQ47QLEC8/USs49hUBbaCTakNYK8xGtT:CJJz7U5LriWtLnaYzcGtT","tlshash":"2713e176b7276e12db56c938a8f4ca499263176a0ba145f43dfc5b5637801b489c028f","first_seen":"2025-12-20T07:06:13.873296Z","last_seen":"2026-08-11T13:02:29.051593Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/3f3347ca323511f082258203bf9b1d68_1-min.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/3f3347ca323511f082258203bf9b1d68_1-min.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56564\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-dcf4\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZCWsQ0zeGcT1E4%2F7OlgoLXSyMa6C74G3JSHSwRlLlE7o%2Bww%2Fi%2Fc7IxK0f72sZyiJXNqqxRvVUIAm7h3JEmYYJSeeLxPe4e4a2YRog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cda7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 896x1152, components 3","md5":"32d79f724232bc355b0398b8a6e6b3aa","sha1":"f8823bc9729abd64c75a532250f0778132bf90a2","sha256":"36454e7d753f72606d0dd22e5dd6c2c771c6f4ad79e2a6e18d7927b34eef2798","sha512":"d25b1235ab74ecd6393fe01506f65770e17903b824f2e43f3d4019c40b0bff66cb034e24ece3bc7acc9e61f09069d4254faa8c23a8835702b07cf3921fbdc601","ssdeep":"1536:fuwLlYsIuZ8c4UMU8oO+4RJZE1CIulDrBM04ptG4LHV:mw59IxeMU8L+0gtIxM04pg4x","tlshash":"e34302482f739119dd48e8fac82e13d1a35d6b3b05339d9b9493aa87a364c8332f05f5","first_seen":"2025-12-20T07:06:13.888999Z","last_seen":"2026-03-28T22:56:40.211785Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/d_3cbd0858.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/d_3cbd0858.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3822\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-eee\"\r\nexpires: Sun, 21 Dec 2025 07:09:56 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awzHG2Zbi%2BqSrhIrD9lb%2F5y1Eq8AvM5PeORkLNVuH1C3%2Bndf4RUPh86PVKleNR0K5PS8IEXpTWGaGjFSnMH2cpbGk7ESPDHfkdondA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cdb0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 100x100, components 3","md5":"148f9d6998e011272bbabbf273f9e528","sha1":"cc65f952ac9fa2110d3f8ba9ba82bab000ed5658","sha256":"d22e55e3fe4fa9263e82d74c0f44d61c29b3770bc39e9c7d59847befa8be73d1","sha512":"2285f20ce14af71862f7fa1cbc0d063533249eb095dcd49384bfba559de1346777f59c77fe0948d0cf9031022ae8ca00e032e47d461ecc816bbcb00a7ac76e15","ssdeep":"","tlshash":"aa717e98e4a0c7550d1f6dbdae8312539cdf37602f9d2a443d45c3a8e3a88c6947454e","first_seen":"2025-12-20T07:06:13.891023Z","last_seen":"2026-03-28T22:56:40.204754Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69452333-d49\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jv9wgXufYyQfPwYAKKEsd6rRaWAZNsQHNoN35Rr%2FbHXhDympIQLhi03opUKvV%2BZCLr1amVcnWdC9cG8eYX9qWn%2BRFA2JR7MYtVhFjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cdb9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-11T13:37:10.762382Z","times_seen":11713,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/03.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/03.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41754\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-a31a\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ty9I9dzRPFIC3gHWW80Az3Puc9vrEAGcBPIS1cSzTkWYpvWZI6IRaC0h45UNZ%2FeYpfQe55OIvILJpnfh6vPiXhA4PFs9f40W6kzZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd8d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00071d1692c8287a443317ed05c43afb","sha1":"73275e98312518c9db05fe83014e2350c678554d","sha256":"2da7a0d233f93c658614931d9474c7eb40fc47bf52615a5114a10a08a5f29fa4","sha512":"26deb0faeb106ab469c5f03835a485dc677e55f801fa895175234216bcc9f0ee684ab316fd6a27173653bc83683a97f264928d704482c5c0ab04fd9adf3e7c64","ssdeep":"768:eYytYytYyDOnNTZJ1SqFHAhMW/dG5cMO8tdBOlpm41Y:eJJHOnFZJ1SQH1WgLCZ1Y","tlshash":"ec13f169bb63ef10eab4b63c28e4bd6502931512fb20d095bdbc8903ab631d0895e1c7","first_seen":"2025-12-20T07:06:13.896473Z","last_seen":"2026-08-11T13:02:29.045447Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/js/accordion.js","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/js/accordion.js HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69452333-10cf\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYYZuT%2FimrK5jz5MWIZueQD1n24Xj8JrMxQ6y91VQc%2F%2FpPw4rSID88zpic%2B8wWVD7Ijw4MXqdcY%2FEqsLza22%2FietiV7gLkN7X5zyKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cdbf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4303,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cf0ee93e9c5df3e2872bb9db3f16778d","sha1":"3fc234e6705f56f4a51c9a17976cffe1b5e4c7c3","sha256":"995f445e3a47fb381651366c1031f1f1eac58ad671f3e54eb456f7f4106de667","sha512":"346902491f0d6cb697dbee7142b14be973d2e3b21460ea98852efa64fd033bd686d730fa224a82cab1862b891ec22a0f00811d67e21de33c49e7b098e4ce9660","ssdeep":"96:PzeC3v/xpJrEIK6U1KtxfHhiF9ZH09MMShSi6MdU7PNYY7:PyU/xpJrEIK6wKtxfBiF9ZU9MMShSi67","tlshash":"4891a928a27024bb846f9266859fe3eb31617047e35c94493a5dc6ac13d8e7074f27f7","first_seen":"2025-11-13T07:21:42.245297Z","last_seen":"2026-07-09T23:09:16.862209Z","times_seen":12,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1y4iY1M2xLER.woff2","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1y4iY1M2xLER.woff2 HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59572\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-e8b4\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioZORqoy3672vCYApNSu8zI7OMt8JNTsq6lvdHzGWSMuw0gYnYSZXdV18xzJUisH34TtHcsln7bDa8ILmmiecMN38Hyfq3sx9r2fmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d51273da5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59572, version 1.0","md5":"c072969415ad9ea20efbcdf094fa0859","sha1":"17617df398142a7c67aa23a42e77e733abc15507","sha256":"c8bb9fed34d88f4baca16ec2935499f9be3831e0149faa98bc2418d53e67da96","sha512":"0cc9bbc1884d06b8ab3b81d8c3459e4ced42e19fa6156fe8bdef028c5a9dbff29b77952376a53574812f2aa9440aeb5c85fceeb5ff0e7759402715327349962e","ssdeep":"1536:zzhPQHLrKed6I/qUM6TjIcjLBzlrU+V7rCUtIuU5Zy:zafKeXqTojIUl1OUdqZy","tlshash":"2d430283c1ca49f6066c3d55186bdafefa513a605ed08262e59f45c84c3d6fa9e2b0c8","first_seen":"2025-12-20T07:06:13.926944Z","last_seen":"2026-08-10T13:39:48.085828Z","times_seen":35,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/logo-kraken.png","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/logo-kraken.png HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4295\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-10c7\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FTa4ci5CBU74oAfmRfNXn9qsFXxW39%2FEB4OY7A4Tsv4X3%2FsGDeZI0xpjhZFBYFWIbOjsCQ8%2BjvZ91nXIlBfZOyjkGTWBtstge2ChA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122ad5b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 55, 8-bit gray+alpha, non-interlaced","md5":"d176bb8a5dce4e184f493dea617fae0d","sha1":"593153105056bf4c4c7b276cbcd1c5c0de5eb138","sha256":"4fb59d62dff1abcd1b134a22e31d824c21d46ef841041b84cb99d25e4b2aaa25","sha512":"3c21a08290ba2d7997f4c7f17c5299ac651e2399c161ad399ffc7289aa078e9090934f9bb6c2b1a2cfe9977ce9ae1eee551643425cab819ba78b14e6f7734303","ssdeep":"96:8Sh8knmWI0a8uJH7RHINVMFdlnyRBtLg7rLSgbs0SZqiTgRLwg:8SGknsJbRZnMMn+gbrSQiTULwg","tlshash":"fd911a0dee609cc0544e960799d6f19a6633fd5247c2e012acedd8125c604bbca7c0c6","first_seen":"2025-06-25T21:40:26.008523Z","last_seen":"2026-08-11T13:02:29.049276Z","times_seen":101,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/bb0aab2b62e611f08af4064c972fca13_1-min.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/bb0aab2b62e611f08af4064c972fca13_1-min.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65789\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-100fd\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9dFd7uf5Q9CaeRqVZWKP4UEokxZscfyveklGdqr7o89FfIT27KvkunYieJUENJqW9upmGa1Mbz%2FAmJo2W3p0muMdWGXKNXTVQJrRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cda1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x896, components 3","md5":"b682b5ba7bd4ae460e21c15b63b5b5b5","sha1":"bf1ced026df1655abe32ec02a4d7cd7d88cb9bc6","sha256":"2b6be458cb2a239a47c5d798e3f025e0e4bca58bcd3f809601d18ae184f2acc4","sha512":"e2e744f2dcfc112096ff3cb073b0cd7d87dc6a391a100eb415d83317f2247b2192e54b700a07c36a51696a129ec20f1c936f12bc3d5dd1ee12a4e75ac0e814ca","ssdeep":"1536:XaPjAFfYM+lj2P8dl831A7Pag8gkFhrhlnsBg:MAFwvj2P8dzDryntln1","tlshash":"fa53021e2325139af40963be095bc57c0e84bf6575ee8e328cb95aaf63683f0349152c","first_seen":"2025-12-20T07:06:13.910051Z","last_seen":"2026-03-28T22:56:40.211105Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/mVR2uf41LyUI6GIr5Tyh_TzNcQCoRvYfGODsIE9g3ulb_jjKeiUP3dszUzMnsZZ5urnph7uR.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/mVR2uf41LyUI6GIr5Tyh_TzNcQCoRvYfGODsIE9g3ulb_jjKeiUP3dszUzMnsZZ5urnph7uR.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7298\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-1c82\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BueGvpMZcBMY%2FLkukKjdpvQWbWO4CG%2BKamLWOlaiKTLFlw6ZHIp8sjWhJkqTQg7%2BGBN%2F7dAKT0u5PoLKdwh5U%2FSTyJDors35fHYWHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cdae783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"00776f80e1fa8c083569ff84296a6b7e","sha1":"66fd3151a1413ee855aa44e0b073fc53d26ae341","sha256":"e618c4887c5b93706d30939a8bf229ff865308906f6cc69562024ba5af8978f8","sha512":"23b5e6fce17ac65b7f018c85998e965be24918e63d9ec7c2c60a5785fa95ab6c48153aa2bc00bf645d0c6a70cc04dc05945d5ffbcd04fe6d21095e96d80bec15","ssdeep":"192:pbOsmLFjCyufeCiG1cWlNHj4IIG+iKfNsXW+p4WkSS/:pu5SeRENHjrIGJdH6Wkt/","tlshash":"d2e18d0a3eab44804453477b71e354f3c7871efd23b82bbc1d1ca2a6d041248c68abae","first_seen":"2025-12-20T07:06:13.902638Z","last_seen":"2026-06-24T17:25:48.975447Z","times_seen":7,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/01ddd-1024x718.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/01ddd-1024x718.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 155017\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-25d89\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVTZRU9ZIflbvbY3aBLt67meqKgDx5LQceI4dRVppKOUcPVg8JiRd0eADya%2BScBKQ9w0E%2FZNSsOCh3iSY1n9pkerk%2B8cBQvncQ0lcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cdb4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155017,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 1024x718, components 3","md5":"88fe91815bc4ecf26c606cbbdaf9e774","sha1":"ab288fd40b2faf01da9b3816455e9334e748532e","sha256":"b8070414a86aacf5a1426746a1d3b334ae72c6041994302eaa79207ea81f11b4","sha512":"afde515603f239fb5982899cf65fea105900bd2d212c90cce1adb58f01226fe82bf402f6b1974fe98dee6af4daea9a7a4e3bca8e955437ee9904e4db215ed8cc","ssdeep":"3072:pwpNepZnFlV5+AyccFM0iMFKz1+CJHXiOPvEVDqMvRCOJMSw8W:pwpNepBx4AuFM0iMFK8KHXLPvEVD7ZC7","tlshash":"b6e31256ee968e91c0030c7f1ae34d2ec815dda2b95a5bebb12dce434b75cf021adb05","first_seen":"2025-12-20T07:06:13.903947Z","last_seen":"2026-03-28T22:56:40.213873Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/grid.png","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/grid.png HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 65871\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-1014f\"\r\nexpires: Sun, 21 Dec 2025 07:09:56 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVrgjF0I4omBKlM18rv4IJ6KdichDfZBFAw6GUWbsTzgvruDhCv0%2BEnnld3hJUl9IvCuDRGJlzkYBml7XHIkhflgTOxbQNy9QKISeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d51271d86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1508 x 976, 8-bit/color RGBA, non-interlaced","md5":"d277daab6a23c5d7bbfdb39f22f7187b","sha1":"950942d567713e554189fc476c14ac42145b37e1","sha256":"d4efec8d37c84c64bf126bc5e4dd17e914466866ed68c94344b3b5a387a467f1","sha512":"7e6a0bad0d7b52a5577c56a4c96173ca61035252e7f82979eca256b633334346ef4e12229aa4d6f2f17509e48fff850fa5f30084548004ef7126271020c633d1","ssdeep":"1536:7a5ojIsVTZ7YTPcmear4WbXYfxWgbZ9V1quXD04p:7a5oEsVTZ7EPcmJEg29L","tlshash":"e05302f6601117f69a942d3464bf415f26aa0f24b695c44ce9fd0f738a29e398de4ec0","first_seen":"2025-12-20T07:06:13.876621Z","last_seen":"2026-03-28T22:56:40.242672Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":818,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69452333-a074\"\r\nexpires: Sun, 21 Dec 2025 07:09:56 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2F90%2FwnHvIbQOi9Zd%2BmmDEXKz%2BlSU2niKs8Opy6Y6BuAib5ezxacPHSZs1oX%2Fd0%2FS5j3AU3IhnDdqaT92UqpKD10fy%2BiXE3ZF%2FhgfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d51278e62783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41076,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41076), with no line terminators","md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-08-11T13:37:09.719339Z","times_seen":3660,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/1.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/1.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-73d\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7YeQfhyZzdCkg6hTJYbK%2B2xxfvRi%2FPMDL%2BGVMqufKvrXjcVdzUA91Bm8%2B7lnwgJL%2B91KT0aO5fl8pzDXm5jxwTliuNOjPHANxMIiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd94783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20bec1425cfdf7f3d126b092cca0b726","sha1":"30b7124b2eb90ace4f51e4efb7be2cc818414968","sha256":"30d6833ae9c6ba60a65df7c72e1b2522934e78f61a68a56f5887de49d46025c2","sha512":"9ed4e85f8f26489d631b389f88b0a4dfcba7e6dfb771bc33d7160b9824781cb921c97592fb3ab9c6eb686d51b282b0edbcb399368012b7a0af6ae98062677e06","ssdeep":"","tlshash":"e3310b482304313a729803c4a77ff1a5e5f974bad76c3289ea6144bca13e5cdd8b78d9","first_seen":"2025-12-20T07:06:13.922852Z","last_seen":"2026-03-28T22:56:40.236982Z","times_seen":5,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/2.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/2.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-d7a\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkDGEgnGpVZaNkDpQiALPUvWymLb0hN73FZOV%2FN%2FAAaCfDnfRiHWzLqXInDJYkj%2FiM8hL023FIzhLURdZLWga828T%2F2laFs0FccH6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd9a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c71f0c8e1aa71ffeb1272efcdf3edde2","sha1":"ff72d98bb1339e99009c412c131db99d34ac7be8","sha256":"629408d2139387d81f571e5cd158038652a6ea8fb81f85a25c6d6d1253c45ca0","sha512":"204a6a61ebacbd8277b896e73a444e3b20c132e93d071aab406d10f998dbbd87342757ebd31e9c0afa21c8469c41d480d168a9ce35c5a4fe07e44204aa8b3fb0","ssdeep":"","tlshash":"5e611145a3453278b08953d8c36fb0b5a4e96cf7e625a689976408bcd11e48c88b7cdf","first_seen":"2025-12-20T07:06:13.886359Z","last_seen":"2026-03-28T22:56:40.224237Z","times_seen":5,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T07:09:53.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6KiPdoFKFFYvX%2BxcbCbY5sFmYTFdPG1FRoScxapewWI0L9%2BfFPK%2BzwVwQowRcF3A2lLPYJ2d4PeL%2Byv9455ucpbiIIMqxiYrcA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b0d511c2a1656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":176274,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20649), with CRLF line terminators","md5":"f3feec08e27161dc86df546f66937c4d","sha1":"03c81af97d603f52c95610b2840466478515c86d","sha256":"66d9f46c40033101105d6201d43acb7cb8d2684d585fcd4c00426410c4d6691c","sha512":"983b713080714ba86955c756104c1033a8f411523be6de71d781a4355defae5cf5257e01376b240599c9713f9d1f59d1952d3f996720e426cbfff06dcfefa4fa","ssdeep":"1536:OrspTVypMsxAyjZmg+BJTt1x4XD+1O4n4GJXPEmKBeyDtJLCHy26fDz/+mjjVDWO:ZU+GYMqZvbuemlUVugjhReTU+UmqKZo4","tlshash":"5a04c560536c4cfa386fd76dc00cfb19f144ea65ef0a53e6b0a4e15aa4c8db944b760e","first_seen":"2025-12-20T07:10:20.637899Z","last_seen":"2025-12-20T07:10:20.637899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":57,"dns":38,"connect":1,"send":0,"wait":896,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/blocks/navigation/style.min.css?ver=6.9","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.9 HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69452333-41ef\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyoNzGgyy%2F5nV8MxU2FOA7YWn4egkmZ4wu3ICy9JasZDiQ%2FLy1Zd6UmWmZg7Nvh0hA2OHFTUOdfcVv2ZX1oGth73xjPpfviAVh4pHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122ad56783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"9d20bf226422cb5168bef956e5eab9c0","sha1":"73d569bfcb92ba76ae987c3ac9c6d8cc091100be","sha256":"65433802260eba9a7ba737a21be6f679ab25480a3c6cc4e7f109041360cfb52e","sha512":"e8ac30913475c5a3c8ce98c1a0fd57a173c745d9adb94e84defd8116ad78835b4f8d27eff25391c1f3554c4e7485aa17bd139fe9bcd461873d30227b24e7548d","ssdeep":"384:OsFyo7/c9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7/c9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"b3729fd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-12-03T05:22:41.874716Z","last_seen":"2026-08-11T14:50:59.041456Z","times_seen":3305,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/08.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/08.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44796\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-aefc\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukPJaEGixLmoHil0Vt90PF5ikyvkS%2Blc9CyprQS%2BfJgHgt6PR6ttOP4aPv2DkiPM5WNzzbH9sAHiSRXml4lW80BCG%2Fae7oUzeswE4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd7b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b8d7f4bf052431d5bd6b795ea247b56","sha1":"57dd9676d7722647df0c545a5c88cc7003384a17","sha256":"c01219f7ebf90f4b64cad8b37bbbfb9663230130e979e27c1a3b99c009f6b20e","sha512":"91fbea29986c1983f1dde717735fa5aae89187e1ea78a778be3a0bdf31b780e51658ab2ea1fbf98937d112a1b1a9e5ac361f9daf10c04508fc4350c2367380ec","ssdeep":"768:bYytYytYyMjvWBirEhQd/VJPuL3CKCxBeYfe8VkEB9Xl1fRdbDhyW8/fC:bJJr2VVJK3+B1fjC+XjQWgfC","tlshash":"8413d1399e526903cfe99930fdf8af8592635748ef635492feac1e167b853441c8c0ca","first_seen":"2025-12-20T07:06:13.868088Z","last_seen":"2026-07-16T16:04:13.310967Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1081,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":879,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/ea845d5c62e611f0b9e5ee782335b9da_1-min.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ea845d5c62e611f0b9e5ee782335b9da_1-min.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65273\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-fef9\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VL%2BcGW%2FL0aZYbjmd%2BWPV8JBj09QKtOqXIexAMqCqb1h8p77Vv8b7Q%2FdHglCWAD52xqLnr6a4eMZ5bY0aVVie4VHv%2BIX%2Bnf1gL9XKqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cda2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65273,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x896, components 3","md5":"7ee3e30afa1f8b81391c5f17c64faa20","sha1":"bed103c512b32ad4a0fadcf1c98badde222c9abc","sha256":"7fde0b54723a4bdd9dde9dbb38cad7a354a96d8e672665947b6ed6c9f6ba5214","sha512":"8f37dd93da92f7feed87c36f41175348b115d0f736452546402b5298700b1262b7086db8ba9726eaead93ea1a9d339b75f2dec2777ec833e45954f35f7ad7b04","ssdeep":"1536:efMaf5NipAaWm5A6rzJsxStPxtn3s/XLXweXK8:eEahIDJsxStP3WLlL","tlshash":"14530269a1b95629fb114470ce8b4dbe5a27a2e5d120ecbf04ce971adb3f04ce3b0535","first_seen":"2025-12-20T07:06:13.887581Z","last_seen":"2026-03-28T22:56:40.216074Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/quote.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/quote.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-389\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGM2SFr3%2FBeeGlg5uoJAepjQy30NlFwtSiiTZnj2gx%2Fr3P%2BeDIsmYO5kSz6Z3b5I7XTIv8sAworX5Cx5utHlJbSxJ6oNR9Ej3K9f7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cdaa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"752b8ec337ea57d8ca8eb185e0821752","sha1":"821afae7f8e91792eb1946a43cb5e179d3ca38fb","sha256":"903c5686c63e71caa5c239a3cad6d4a817f5eb766f3e4d695b49d9b786fa86f3","sha512":"46c48a74bb13bd4dab352a53c1f4b59faa803837e9498c9cc71c030263e31f9905705b46fcc22839663eb52908103d81a830b94855754e81c0a2fe5bb0e96c50","ssdeep":"","tlshash":"431100de9afce46c544b86b0af34b298780e348925b60d909c481cb65102d58ab4bedc","first_seen":"2025-12-20T07:06:13.900575Z","last_seen":"2026-03-28T22:56:40.242071Z","times_seen":5,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/fbrfg/apple-touch-icon.png","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:56.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/apple-touch-icon.png HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 11388\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=6,i=?0\r\netag: \"69452333-2c7c\"\r\nexpires: Sun, 21 Dec 2025 07:09:57 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I60g%2Blh76rOjty4a%2B7T1Pkn3621S7BaDjmREf6z5%2F01BpTjwQxLO10oyM8kluiZeteLI4fm86nf2fS19BNkM4yyHTxvk0jS%2FUYAUnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d512eaacf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b795eb9c7980fee87dcd4d319e238280","sha1":"47dc2254e304d1311261f423bf196db2d295f487","sha256":"74aa040cc938c80b0e7470710131cb71e47eb84fe2d1c8c49ec79c06a87b6041","sha512":"a6cad8f0bde79bffa04bd5c6ef605688eeaa94b24d8515052b6fc77f8cb1e694f4eba2505406b128b335680ba4c1ac73c22d1b1b55fac97303b659f5f9d74518","ssdeep":"192:Sklr9c+6HXeVaCQ/VXro+Y4lkI2EV4O95WGHzE5n40acXddSdYnthfa:z9clXCS/VXFaIvC6nzs4+DIyhS","tlshash":"a132b084f24c5331d87ee6b7e219eeb5f3dede5d8d151742018ea30a9eb15432197c50","first_seen":"2025-12-20T07:06:13.863707Z","last_seen":"2026-07-22T17:35:50.089094Z","times_seen":7,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":891,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/fbrfg/favicon.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:56.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=6,i=?0\r\netag: W/\"69452333-50a6\"\r\nexpires: Sun, 21 Dec 2025 07:09:57 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ms2Kbbh5%2B2gvFXMzvF9BpEeDtUs1IP%2Ba9F42SocWxnWOSl72v%2BarAoqZJKb21aJpuglIau5joQNCHvag9PMr%2BEcPZhuZ06O153QpvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d512eaad4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"332b5ee30e2cdad07fa6ec8f59009f7a","sha1":"4ee00c6d4e50cfefc9dd5652d3abf04c46ac9fa3","sha256":"bdfbdb96141f2ce962f5acf463d9ed0970f52bf7439fb1dd4dc20d21c37e23fc","sha512":"6c11258d1c2f02d69661464cc01f8d28c07a96a1f6a13f4408c78889bb6122ec8fefab389378d6924eec1815e3f1dda7edf2a4c8decceb6fda01a03d480f188a","ssdeep":"384:XvdmWMn/KCHOqsbLJC14ZYm00jJ9BdvAmnQo45/o27hjww7:XvdmZKCunJC14ZYW9dvnnQVoqhjZ","tlshash":"1192e13dc0f9778798220498f021e9dd693ca63ec9f4475a8ffe6428705b94b824696f","first_seen":"2025-11-14T01:45:12.663639Z","last_seen":"2026-07-22T17:35:50.082783Z","times_seen":9,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/style.css?ver=6.9","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/style.css?ver=6.9 HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69452333-709\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuGI2k3tQSN3q%2FJHJR6fNYS5Y6QxWPrxeTAbqp48GkfLHHHUH2bgpwDJ0FWSktEMvdi5Su%2FNCXdnn%2FXICjwxjKimD94N7UX5dM3bFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122ad5a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (815)","md5":"bfa3df7004fd0c37eee0c4763917417d","sha1":"12546a9ab92148c4a62538a81f073a22dd43ab3c","sha256":"ecf9eed41eb54e11103495253318f7b6988e97dfb6a7764a5d01e56ec0b30849","sha512":"3ef72558d399ac7a9c572aa134a0ab7ecfa67313938e3957828fececf3840017d49e0c19eb2eac3f036805002a3015c92038a7ff3eea9e222f2ec37f9b71dd5b","ssdeep":"","tlshash":"c731b548ab34dbad2bc2030af1f65a09e25dc100dfdd44e1d51f822a1b7d32961fb785","first_seen":"2025-12-20T07:06:13.865865Z","last_seen":"2026-07-09T23:09:16.86095Z","times_seen":10,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/10.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/10.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38248\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-9568\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KExTB1rLypiwewh%2BFQec8lbGFaObM2nhMRTWsoaPwZU5805GNkWI6gIbO8BzB0doKkLwhGnc9%2FJ3oBf0Cm9ooSakBjMs55Pn%2Bk1S6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd8f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97de6f8dbd96be812459d7cbb61138db","sha1":"589907e4fc879d917d0a5c08e2ba98775fbc85dc","sha256":"a9e4576b524e99bdc22aeb7a5e3ace7b81ac8220c35439ed89b6e16fb1521c1b","sha512":"d9358973be5511457abfdf457252e76891c63435002d00a2c052e651dff3d88a3c591b5a21988789359b607dd80553d1d4ca4473fe02b4c8073336d7d62de611","ssdeep":"768:eYytYytYyAZgh8eYUS7hsjFVsCs7m4cuawvnEWjIokior44:eJJUZgi+pVsJm3tMror44","tlshash":"5103e12dbf637971dae7613468e8de5592632a58fb13160a74bc2a0173813934ecd2cf","first_seen":"2025-12-20T07:06:13.86021Z","last_seen":"2026-08-06T00:02:12.584147Z","times_seen":22,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/593680dc3a1311f0851baa21ebb699bc_1-min.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/593680dc3a1311f0851baa21ebb699bc_1-min.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62892\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-f5ac\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLJPh3QkW7F5BaTP31Xg7Slpai2DURx6oa61cabrRhsGBiCjPceURShga3LBThHDyVxY6hxlg3gtl%2BuQHEfbsPAhV3Yjpm99Pe7eew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cda4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62892,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 896x1152, components 3","md5":"a34e1d26a65a5f716f892270f519e154","sha1":"79d75e11955c9d44590b2306f6efe19203ce4290","sha256":"1de17f497188e6ab7cff2e887d285c86c78e5fa524bd5c54c034b18c569c267c","sha512":"f240c8e3916188a9e2f97dc5ca4711eb214fd0e84c440079d77d7ff362889ee0fae1079406305357f88f455d49d9955b86aa672ff94487ba148951ad8d01705c","ssdeep":"1536:y2q0YboiccIhXWwvN+t8NKrB+9EL4p8+5gTRr0tT:y2vYbodnWwvN+t8oE9Y4p8+cq","tlshash":"025302253e94bd3ffad081441f251e81d34c78fb3b7c964b0a899676b67c02e69079a8","first_seen":"2025-12-20T07:06:13.854787Z","last_seen":"2026-03-28T22:56:40.239319Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0C4iY1M2xLER.woff2","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0C4iY1M2xLER.woff2 HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59452\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-e83c\"\r\nexpires: Sun, 21 Dec 2025 07:09:56 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WT%2FTE%2FJqIFLW9vb%2BEW2eIoSzbfCSTqbujPNZhs8GxSW%2BeddyzcAKRhmhQ0cti19SyGsKJJ2n8HLxBm5F%2BDypNr%2FgrPjuvi0TZovrkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d51272d9a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59452, version 1.0","md5":"6ac7451b15c9f05a0c88d4b7372c1655","sha1":"6a00c7bb7650faf5b1cc8e0bc2182777b4d77365","sha256":"f6184a28049f5e03bd1c385eef1aa0ab4a334a4e25ada1fa6fb2650f3a2f7a11","sha512":"6ffc2775611fbdba356a7ec5aa3f1533d4c040a3757a68ca7201b4c6938a8cfe83dc296da23a4671c23251fa8b1ea9f73ed3d12c1893ddc76562d333ffd23821","ssdeep":"1536:adJOPemT+cbToDywkHVApU12CErlcN7NCHTbf:adJOpTfwkOWAhB8puX","tlshash":"764302f3e662d877d54dc2787e01a21ec908cb3d46a1beb36a5c51e084b02319a97e4f","first_seen":"2025-12-20T07:06:13.912618Z","last_seen":"2026-07-23T16:17:06.981699Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":880,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/07.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/07.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22226\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-56d2\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SORBfRaHYH2oEGcMk4yEj4IRv5a5uc3J7xigOwJBvnv%2BqscfBUVPSN%2BM5lUEoTJaq2f3qHGz1Qde3U7gfIs1es9P3b%2FJ8ewlW7xoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd7e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2113156e5e173469d92ad1e909e7e80d","sha1":"6bed382725127db907a68fa8fa8c0938f64f5cf3","sha256":"be6865b2004dde3aa782b0c2b11403b603b0f3baac126b96366dd4c7df662ae8","sha512":"4b05d1b843194e17269fd4c26c9bdbf069573f88786d993c638e6b46c1e892ffe99360a75062014f8c178d62dbebe48dc49c85d80805654bf58afb845e818895","ssdeep":"384:tYNg7BYNg7BYNg7vSU7wrV/o3+t2GHjpusczRiJWi+nyeDq2:tYytYytYyrZCV/uUju9byc","tlshash":"74a2ae79fb579d63eef7f534b8d8c79593a31214e31291c178ac1a229b80181ad8c0cb","first_seen":"2025-12-20T07:06:13.86957Z","last_seen":"2026-07-16T16:04:13.341428Z","times_seen":12,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:56.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 20 Dec 2025 07:09:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qg94foFW%2ByKyC6cCBMOjwULvZ7rhbtRpiGOkNgjwCnyyB%2BS4xInYKGbax%2FqWSEvTWyaDRkv1N1OvXF4%2B472VQf%2BmE%2FZ1eOn6e%2BuhUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b0d512d0fc1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d6da2714de3f8ce85194167557832ab0","sha1":"d0ebe4ed3a2cc491bc6fb8a8bc65cd6da4de1cc4","sha256":"4900f8d263a06f575ed95f179862e1a3d840eba4595bc993709dc53ba2ceca99","sha512":"451a07c55121ad3696fdb194037a95e4749f97b2f72dacc5c7479d376dc4337f1b214bcd3a9c1c54ba92d7b9358f5a2e5297fdc150d28782b479dde8174f0287","ssdeep":"","tlshash":"f6d02b9e904362874812146039c115c2664d12faf83a41a82d86d487529857ece9b5d8","first_seen":"2025-12-20T07:10:20.64493Z","last_seen":"2025-12-20T07:10:20.64493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/tick-c.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/tick-c.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-396\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79jcQkGasqIkJjwP44DNcfbrH1ItCSos1Hl6UCszwXylxbD7RdY7Fv%2FzlZFTy%2FQJVnaEoEMpdRm90h%2FPlqLBFS1lpQNktoGX1og3yQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd63783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":918,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cfa6523196f2d15611bf13992f74ea5","sha1":"d403af2412561ce5509d4a435783fc4ee9a975df","sha256":"5168ee7f67cc128aa1351bab7d50a3fa6e2158ef40df8daf6bcd0daa319f916c","sha512":"220ddb896f04aa92771712c2392a9071a3a80145935545902db31e866cda3ed95ad33ac1dddaae28c1c797e95a4c0c6bcdf50bd4cdc88203787737abbce12aed","ssdeep":"","tlshash":"6e119cb7f7cca2e0c7c5c3e7a4b5d451132b716539919a0990f049e0f2444dd8c8fd84","first_seen":"2025-12-20T07:06:13.882745Z","last_seen":"2026-03-28T22:56:40.206108Z","times_seen":5,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/6.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/6.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-1040\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=800rq7Jzy2hbf%2Fcxrhnjqw7%2F0esrUFxfPPlbBNfGU%2F86RfBP5AFmN5Hsp9L6JIRZ3WKMAxRa0uS4RaiAppAV9gLjFMykenocX3jhiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd6a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4160,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04b432bd1b9ebe8c6c9d6ed00bd3dfb4","sha1":"a7619bdc1cca6bd8b9ab44422617dd7bcd429b6f","sha256":"c7f5650a12afb9a18583d0d0cdb24719b90947d980eb42fdc46567e54329ebd3","sha512":"8bb32e59e9a45ec9f74da8f34bd37ba6ab5c0001cd55a698e6356442a9c5fe639d38107258e3d00b073752231c0ed59d83728bd353ae244553679d1adcc9ed26","ssdeep":"96:KD+NQ6uCDmLWG78b1vy0Tarh3QWHgUnYfWS16RbrWBB35:KDqQ6NLnJjTUhAMgUnc2br4p","tlshash":"558186f7d28471c56647dfb0dc3bd9669b5e38be2fd28781c3509aa066300e29d8cc50","first_seen":"2025-12-20T07:06:13.905546Z","last_seen":"2026-03-28T22:56:40.234984Z","times_seen":5,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/01.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/01.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62400\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-f3c0\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2qtOevb5ncmsVZiQFbHHaUWT%2Fy7pXToSDUnwEf9soZpd1lg1YAZ2ii%2FV1OI17Qg7dHedKjHFLb63TL8hWNb06rSLye36IIQrYUfyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd76783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79b26cc1609bf650423a6d3621c19bfb","sha1":"bf6da00fe93c99871bbf95cfb0ea6b21dc288e6a","sha256":"0a363e001574744473556012f6b663463aa90ba4c43ee061651598fab41dbf7a","sha512":"421a5ed27a05148978d330d5396843bba073d3257574ab95e813964bce6e52b5c5988749444ca095f44a507531fd895250807be6999a0f7a87af443e7c486fd9","ssdeep":"1536:IJJ6pHDOfSnx3RbF6xppLwERLexdLljS+a6YKiRj:IJJ6xDHF8pBknLHkX","tlshash":"1c53f29adf5bfb92dfedd07415a4a5a011128212e2138b0930fc2a0673a5355bf6f2cf","first_seen":"2025-12-20T07:06:13.918186Z","last_seen":"2026-08-11T13:02:29.078941Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/02.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/02.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37242\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-917a\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xY0US3Wvaz59fRFpdqG%2BxOe%2B7ZC6qyLtU3ij%2FnXa6sg6onYS5lMHtosESQY8XRTgGPP9h57FkFYiZsiFnOdj79GDbo6T%2FCZKyxKU0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd90783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3581ae9b83cfd3656fcf038790e5d6ad","sha1":"d7ebf4bc6b90666c54003eeea82d9ebc6d95220e","sha256":"bb31f2f95334c5a94798c1c3196bb11fc70068422fa0fe22e1b12f5b01173423","sha512":"57df10bfc66903a52b687fd18bcd7e26264d3faca25a2d77465bc8ca3b7a3f641eae94155cd6f4d7a6a99eae323867edc2bd0df332398bb2c3134f190a90afef","ssdeep":"768:8YytYytYyt52G48te8iOlCP23LpN1z4n4+Iqtwtx1FyMQveGj:8JJX2Hae8iIRX1knnZwtx1IMQ7j","tlshash":"47f2f134af77d631ddf48778ade0eae06492da28db2752c1b95c1c006b901ac9bce04f","first_seen":"2025-12-20T07:06:13.907749Z","last_seen":"2026-08-11T13:02:29.046416Z","times_seen":24,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/4.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/4.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-7d2\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQAKLVkfG%2Fv3sluhObeAMaXsmmjnL6%2Fk%2Fekibw%2FaGxHBShSjzKzt9seRKDR4Ek2iebFVnxtgJvCbnvtrVb06ujxi14Sd6RS0sNyl4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd92783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb66e27096d7d5114a2c2f82eec6054","sha1":"66b6358e1128894d8349345f9427b39bc1aaf4a2","sha256":"415c4ed644346bface4ce5538cf1a49596e0d29a8e819c9dad7a7abf84a47c18","sha512":"a2a0da83fb682b318c54ae21ab7320d8c45ecb07c38059acb6dbf921760aea14e2b87953ba71d57be11593d25a5f2af96139b6cc86b3edb0e82880ac6530d163","ssdeep":"","tlshash":"2d41ec0db3453176b2280388e368f1a5b0ff28bad69a3745f562017d913c6ddc9bb8d9","first_seen":"2025-12-20T07:06:13.861812Z","last_seen":"2026-03-28T22:56:40.221408Z","times_seen":5,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/3.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/3.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-ba0\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lE6cCplU36j4qtxpdH8O%2BkSleeY8SzlGvu82fj7gio1w3ne2t2GxcTVx97GNjxcgaLwkbIUSriipASATmEmudFQCp3tdXJkxMsGoJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd98783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2976,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddbe44171ea9c539bf595a78bf50ff96","sha1":"2bf47ecbbce327852fd281762afb10595abe29f0","sha256":"3a2c4d6f53c9ac598b630dd0307c7e43f8182114a01482f377cc870bbdbc4f96","sha512":"9c67385ca39e3a5cb05855e8c9daf1d4c852a538cd7294890476da708e445542d2c336e4f89d2e1da77daa8d5d9f3f15840345cae8a0653c2a21cc62ee3ee1e0","ssdeep":"","tlshash":"c151cd486304723ab09843ccc77a7059e5a86cf2d6306299a7e655bdd22d9cc88f7cdb","first_seen":"2025-12-20T07:06:13.875243Z","last_seen":"2026-03-28T22:56:40.237803Z","times_seen":5,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/8edad80462e611f0afded6507ac75966_1-min.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/8edad80462e611f0afded6507ac75966_1-min.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68408\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-10b38\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2B1sfducLoFbmH0UtM%2B60BdsFw1ClVpwA35VqaBTIFVGbsk43OT9mDi106gQVyxTLAFYepWqiZTfOewVnskWQmi%2FLvvIUUFqEJreDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cd9f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x896, components 3","md5":"764b180b1bbd2d1accfbf7b1e44ee695","sha1":"daabf1e7b22e596b4441a3d1b5d3c4897b0c8c38","sha256":"d0fa16f97f95be12e5987a383cf7c3bc07b8030b07fa30061e97646475c27a2e","sha512":"4701ffd58133c47dd21a863a95591d5461bc40c6aa89f402f0b0e883ba8bbea2058133e9811b2c4844c966dc07ca8c10a8c6c63aff0af55b9635b0952862d53f","ssdeep":"1536:8pz07KClmqvrNUlZ0ywBDSmmIHcimd+Pd1HzhgJQx:EwhxUlZ0tlxHcimd+PXHtEQx","tlshash":"1f63f1e654e7aca4efe0273e84c221760129657640a0e18d25f05b9a3aff291ccec77d","first_seen":"2025-12-20T07:06:13.853689Z","last_seen":"2026-03-28T22:56:40.241011Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/themes/wp-cooper/assets/images/long-right-arrow.svg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/themes/wp-cooper/assets/images/long-right-arrow.svg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69452333-279\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfOBVDVGo1mG2e56IcO5oN3GHwDWcH%2FRCJJ0Jpx3KKxIkDVV%2B61RErdcJWcyPtT%2FqCq3xkXInvCh%2F6vKDMcxETMwxECXpBX00%2BjW1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122cda5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc0c6d9724223c540c994335c4b0a777","sha1":"34642398af0fc1a9f120903874b37467f1c7b8ed","sha256":"fea9cacf3213c53fb5ba2faf2e15fa5bf4e6e6dd1795ee3d1419e925765860dc","sha512":"08c17b186fbcdfd7c424edafe00e2fec22a9ad472b7d52b89a0d7aecf838703d4d38f3fad9d864f6a9f9ff0ac7eef6052a50c0391e06b86f6291d7c3938dc0c4","ssdeep":"","tlshash":"93f09988e3ac50ba9c858be9dff4abc2918f30c140e08548c41428b7a34bdc92520ee8","first_seen":"2025-12-20T07:06:13.898686Z","last_seen":"2026-03-28T22:56:40.203899Z","times_seen":5,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/05.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/05.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71940\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-11904\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CCBjxGpGz2igA7HbGMcQEYPVes%2FHdnvSkKrl3er75u%2BrtJV%2BJQKCmCUhMsqzzB2AnGekHsPscuDKc806n8KsyKweevVumQk6qok9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd87783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7eda6a17c268cb6d970f1989e7f4716","sha1":"e3d5b46861ce1fcd65d1b2c9535b6de869246dda","sha256":"b4bf6bb842ed94053abf073c94a87cf7413c770c7971b0521f5c582c0d78dc44","sha512":"d0f8d4a47d0aa0b262d03a022fecd39327f5bf6a1fc7724bb16db717c2875a1996c594ca34e4c665dc9db56c1dd7deff2fd424c9374e1511a4c8e66724d1ddf0","ssdeep":"768:cYytYytYyOtIhC2DEzKNbxfskttrb9fuWDTcTffb5c3JB5r9LsY3y+GwDuDd9Qig:cJJkEdBvgDILskGpQrXLiyHEiue3bh","tlshash":"376302387f43ac03e5fbf930a8e426a4c7126f64ea5186397edc4c0673a01968d459bf","first_seen":"2025-12-20T07:06:13.871897Z","last_seen":"2026-08-11T13:02:29.073083Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":420,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/04.webp","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/04.webp HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43240\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-a8e8\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVPxUPs6d58nPTjMi9tM9lwpZ6Cp0Zt5gdK1GFf9%2Fva0TAvY59YBDZwRTDLV1Xp1A3lDteox98GSRXQ276ED6J6GGET3E54E5keGzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122bd89783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7e8ec39588537b10446a9599055712b","sha1":"e05e3af19adda5f193d61b273f53ea4ca1ebfe44","sha256":"2649e217ca4edaa0c64f310799f21291524657372f91aeb96626b69ccbf83d85","sha512":"eaa8ace97d7dc032c2ccc30ec47f21c3d8307a164dec2eb8fdbeed12e9157f20100a30b5fe1f60e7bdb566b0e6cb5cd2bb0922cac2155533d83bd8c63ff5d9c9","ssdeep":"768:+uYytYytYy3jgpNvSteS7BVgpvAe7GenKnUS50sK3Jkxm9u7eAFzDZXA:tJJaNateK2pvAiUBVKZp6f9A","tlshash":"3513e039df87b520edb2d638adf05f91d1a34205f233428976ac0f6177e21859aca14b","first_seen":"2025-12-20T07:06:13.883935Z","last_seen":"2026-08-11T13:02:29.09339Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krab1-tor.ru/wp-content/uploads/2025/12/ri-min.jpg","fqdn":"krab1-tor.ru","domain":"krab1-tor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://krab1-tor.ru/","date":"2025-12-20T07:09:55.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1-tor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 10:24:05 GMT","end":"Mon, 16 Mar 2026 11:22:44 GMT"},"fingerprint":{"sha1":"C1:DF:56:36:33:A7:FF:28:E8:3C:5C:7B:13:47:A8:E5:79:A5:95:80","sha256":"8F:47:BE:F3:9C:01:19:9E:A5:80:35:3B:2E:52:81:69:E5:BB:B2:BC:35:D0:8A:AE:29:2E:EF:BE:81:98:17:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ri-min.jpg HTTP/1.1\r\nHost: krab1-tor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1-tor.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:09:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48709\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 10:04:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69452333-be45\"\r\nexpires: Sun, 21 Dec 2025 07:09:55 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZlxXeRW0rHL6XbTaXlGsPNvnUKo4R9RNd0ltch2M0SBYaqE9PcYt1ozDIjst%2FkG7kB3VEkIk4dhyzQ1Tw3iMyd7bAh8hqjdevzecA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0d5122ad60783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1242x672, components 3","md5":"6548ce9e824859c65e83221ac4635a8a","sha1":"6a165ec1d8ec7dc25ab747aad4911bce21b3a49f","sha256":"48860cda7f2aab26246aaa87a1d4576e08016f6a424cf4271bb2169229424064","sha512":"aa5d3aaf151c835699703272e2dedd1c6e6e13f666ade2cf872a13337bae96e07f783565fbaedc18c6dd53a0bb16b535ea50ab4723099df964f8c1dc1783226b","ssdeep":"768:7ys7jA+TS32+WiiiiiCnoiDLYY8g7nKyCJVNa+O2QfwjZjyjYKDYVVVVVY4OQfCy:VnjGxkosqgTf6aL2QvYKDn4q+44xv","tlshash":"fa23df3e5e712760db44733ec2d19820745cedf09dae8429a261cbac6c1f3da98d8949","first_seen":"2025-12-20T07:06:13.857944Z","last_seen":"2026-03-28T22:56:40.233548Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"krab1-tor.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}