{"report_id":"bba232d4-0b81-4956-8af6-cd3d7970261b","version":6,"status":"done","tags":[],"date":"2025-04-19T04:58:56Z","url":{"schema":"http","addr":"kkra28.cc/","fqdn":"kkra28.cc","domain":"kkra28.cc","tld":"cc"},"ip":{"addr":"172.67.206.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krla30.at/","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"title":"Just a moment..."},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T04:58:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"krla30.at","ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-04-19T04:58:56.313525Z","last_seen":"2025-04-19T04:58:56.313525Z","alert_count":0,"request_count":5,"received_data":55799,"sent_data":3948,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kkra28.cc","ip":{"addr":"104.21.15.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-16","domain_rank":0,"first_seen":"2025-04-19T04:58:56.311956Z","last_seen":"2025-04-19T04:58:56.311956Z","alert_count":1,"request_count":1,"received_data":1350,"sent_data":478,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-19","alert":"Sinkholed","trigger":"kkra28.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krla30.at/","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b3663aad96ff967432444ccbc654c69","sha1":"94385c4a3c44c0846167c4192756899a7b40ab52","sha256":"a6381b39cf8033e2abc03a967bdd10befa375ad01c75f5f9bb79cd1e298dbd6b","sha512":"a9238994bcdfaf9b0d1ed27bf85d8205743c9356a15d28feffd6fa5b2f5693249931a4b708843a7cb897d4c1cf0cfb332cd3fd195fa0d6e1241e14c041a7ab06","ssdeep":"","tlshash":"5c2187ab3eb346a41fdbe53706b90b883430901b6801d6143e7c40508fb0ec6702aedc","size":1148,"data":"","first_seen":"2025-04-16T10:22:07.499254Z","last_seen":"2025-12-03T02:10:16.556263Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/cloudflare_captcha_frame.php","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c44a1351b676d21630ad494130fc92e","sha1":"71e23457ad44c5dff057ca9780274cf03fa21d5c","sha256":"ad396249ae1173bfcb60b44b4eaa16814b8674c63161446b7300af7bfb5e2468","sha512":"a7ebe5f08f88ee21a0b398933313d5e70c4d616b3f194f5cbe573db6b954367bfd483234d7c2be477f68305cb9e292f30d966b203e89f8a2f027fc0624e4ec57","ssdeep":"","tlshash":"e5f046af3fb706750ddb96b238ba8bc9383294125981aa06fa3c4070cc21e933036dd5","size":580,"data":"","first_seen":"2025-03-07T11:01:59.146646Z","last_seen":"2025-12-11T13:00:26.353828Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5395242a0bfb4fd0959fe2d970527657","sha1":"37b508997b5cfb014d544f49c1118c9efe1eb488","sha256":"9075900ad1e7f61a99bd147150afec571bd67ecbe842c694d338eb7c7f3279b3","sha512":"c3195da87f6da9ed0cc393075d8a4353176d13034b9d7774c90a80504d547ee6cb3f5ea3ed8ee522f8610242fc751df25dafd9e92cf70f9ccca19ede943ee58a","ssdeep":"","tlshash":"8090024585867151d432257441ad50a0416854016c1dec12210c9c210d4032b5d44291","size":53,"data":"","first_seen":"2025-03-07T11:01:59.148941Z","last_seen":"2026-06-07T07:16:29.618226Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/js/connect.min.js?2","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc1c95b6ab9223711ed7f50a15bc930","sha1":"7d6cf05a1da4d78f98f5ceba3784a0bc210116a3","sha256":"9fa0fd5b129cc1062500cf31c6be66f6617d829c3e4ccf0dc7cdba46f992632e","sha512":"115c9699f4ef5c42484fe47b58b2e87dec9cf96515a2b6da929237e7d4f3b579f2f20b4c61b9795ca549d9b3f24f85ec5afcc18431e26c215108366f3491f4cc","ssdeep":"192:op2O/++sssVpvqUl87UlCUldUlQwV3drycp3FJQipv8DIk1FBHwKs/XsUCbl3Pii:o0O/++sss6UlyUlCUldUlBXp3PDN8Dhl","tlshash":"84329840eae4f855a613139da70bbbc4f10815aa30201f97a76c1d88f95e47be6b3d73","size":11274,"data":"","first_seen":"2023-05-03T10:33:12Z","last_seen":"2026-08-10T14:37:19.516477Z","times_seen":1090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krla30.at/","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-19T04:58:37.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krla30.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Apr 2025 06:06:27 GMT","end":"Thu, 17 Jul 2025 07:05:00 GMT"},"fingerprint":{"sha1":"27:71:A6:83:DF:29:59:74:F8:8F:0D:EA:54:7E:7C:B0:44:45:AD:E8","sha256":"F1:C5:3B:BF:25:E3:9E:72:14:77:7C:22:69:81:AE:CA:11:FF:56:EA:FC:C6:19:2E:D9:12:EA:E3:AB:DA:53:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krla30.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: http_refererq2=https%3A%2F%2Fkkra28.cc; tor_scheme_id=1745137543; tor_port=9095; session_id=43e8a25b0aed98da22c1e1a60b09ff53; session_id_e=8958f25859bc51a00f882ec34b4cd5f9; connecting_hash_lite_version=1745038715; connecting_hash=1830f166feeb78d4dc07d738e6ecfd21; onion_server_id=7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 19 Apr 2025 04:58:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kQezHYdCdwyJwp%2FiVppM3EfAuKEIqZqdY%2FVmJpRN8dWLNeV3Y3l4NeH2KmVfZPeO45O3DfH6GTLn5Qj2hzj9Y%2FCj%2FIiF6GtSo%2BSzYWWoDVMWlXN9aec00SHZCb8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: proxy_cf_session_id=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.krla30.at\nsession_temp_active=1; expires=Sat, 19 Apr 2025 06:28:37 GMT; Max-Age=5400; path=/; domain=.krla30.at\r\nlocation: /\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9329d3eeaa5a712b-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7645\u0026min_rtt=748\u0026rtt_var=6413\u0026sent=95\u0026recv=119\u0026lost=0\u0026retrans=0\u0026sent_bytes=12216\u0026recv_bytes=8328\u0026delivery_rate=1318\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=b6c6ac8da216c21c\u0026ts=1520\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":14155,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T03:57:29.375322Z","times_seen":17829662,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-19T04:58:37.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krla30.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Apr 2025 06:06:27 GMT","end":"Thu, 17 Jul 2025 07:05:00 GMT"},"fingerprint":{"sha1":"27:71:A6:83:DF:29:59:74:F8:8F:0D:EA:54:7E:7C:B0:44:45:AD:E8","sha256":"F1:C5:3B:BF:25:E3:9E:72:14:77:7C:22:69:81:AE:CA:11:FF:56:EA:FC:C6:19:2E:D9:12:EA:E3:AB:DA:53:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krla30.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: http_refererq2=https%3A%2F%2Fkkra28.cc; tor_scheme_id=1745137543; tor_port=9095; session_id=43e8a25b0aed98da22c1e1a60b09ff53; session_id_e=8958f25859bc51a00f882ec34b4cd5f9; connecting_hash_lite_version=1745038715; connecting_hash=1830f166feeb78d4dc07d738e6ecfd21; onion_server_id=7; session_temp_active=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Apr 2025 04:58:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xm1AycNlFWdCPD1Ab6s8gJ%2Ftp%2F4UTHCaCNCidoXFk7k9OmiUOkTb%2BkBL6yxT2nIsirLtwalxl4WM0JajaIftiBtfTDZiMmM33qOzRFqroaIBz7pRXjGDOw%2FVXO0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9329d3eefa5b712b-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7519\u0026min_rtt=748\u0026rtt_var=5062\u0026sent=97\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=12982\u0026recv_bytes=8887\u0026delivery_rate=14814\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=b6c6ac8da216c21c\u0026ts=1572\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14155,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6195)","md5":"edd52fffbd243e17e5184cec01bf46ac","sha1":"031c11557d8faa97be33e695311802a3ced33f04","sha256":"111057f664498b143abd91c8b56a1f2d31658d5f751a2356342b5dec9c1ba465","sha512":"3078c1e4a24330df01246284564ea6b3a62db7a28b0dda7f2dea33c29123dba7b0e2bd40a645f269fd7ce3ff9ea4319839b345d07f8fdae5651f5180219cbafd","ssdeep":"192:X2JPnIy9h21lSmESaJkmW9DewuJrP71FlMgvDLW9s6g7Kr2CStg5FRa:W0lVEJJkmKeZf31vDOs6g73CStg5Fc","tlshash":"67523a3babe2601d1843c6b531f56b8e2c30d407e6029768fe6f96514fd6e521e23b8c","first_seen":"2025-04-19T04:59:02.796958Z","last_seen":"2025-04-19T04:59:02.796958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/cloudflare_captcha_frame.php","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krla30.at/","date":"2025-04-19T04:58:37.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krla30.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Apr 2025 06:06:27 GMT","end":"Thu, 17 Jul 2025 07:05:00 GMT"},"fingerprint":{"sha1":"27:71:A6:83:DF:29:59:74:F8:8F:0D:EA:54:7E:7C:B0:44:45:AD:E8","sha256":"F1:C5:3B:BF:25:E3:9E:72:14:77:7C:22:69:81:AE:CA:11:FF:56:EA:FC:C6:19:2E:D9:12:EA:E3:AB:DA:53:A4"}}},"request":{"raw":"GET /cloudflare_captcha_frame.php HTTP/1.1\r\nHost: krla30.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krla30.at/\r\nCookie: http_refererq2=https%3A%2F%2Fkkra28.cc; tor_scheme_id=1745137543; tor_port=9095; session_id=43e8a25b0aed98da22c1e1a60b09ff53; session_id_e=8958f25859bc51a00f882ec34b4cd5f9; connecting_hash_lite_version=1745038715; connecting_hash=1830f166feeb78d4dc07d738e6ecfd21; onion_server_id=7; session_temp_active=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Apr 2025 04:58:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IT7ZeiVj4ey610TyV48gimSGQQw0guTJLODIbtrpffKTXag5R9h1%2B7eVI8Hw2xgtC7RLDE%2FqBD0%2FaIt6s4QExIwTrJF%2B%2BFixGX98k7TnOobL2hkoe37hYm6B%2Fmw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9329d3f05a5f712b-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7127\u0026min_rtt=748\u0026rtt_var=4580\u0026sent=107\u0026recv=124\u0026lost=0\u0026retrans=0\u0026sent_bytes=20424\u0026recv_bytes=10012\u0026delivery_rate=244551\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=b6c6ac8da216c21c\u0026ts=1785\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10956)","md5":"ffb534f10d098a7bb62704f6e482cba3","sha1":"c044f20cb4ee00738479480748c89723493684df","sha256":"db3f803bcff99263007198d96789bd5f54fdd502b03361d7fcd29bdd02c97ab9","sha512":"78e036b5aaa0f968bd6f539f33dc260d4070c36862e07679f4c173cb4ecfbf80cbb330803fbad7c8ed4b8ef11ea551c9931caba8e53fb81adda86a9b7d017528","ssdeep":"384:L21nb92GgAHLg6Okw+u0ekoorlzSZ2malpaVYcKty+NNv/:+EGE33lortDmalpx","tlshash":"ada2e72341d405b9b016c3e993e5b59ab5324517af92b427f29d0ab1cfc84ef2763b8c","first_seen":"2025-04-16T09:39:52.277798Z","last_seen":"2025-12-11T13:00:26.347314Z","times_seen":89,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkra28.cc/","fqdn":"kkra28.cc","domain":"kkra28.cc","tld":"cc"},"ip":{"addr":"104.21.15.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-19T04:58:33.637Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: kkra28.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 19 Apr 2025 04:58:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://krla30.at?from_host=kkra28.cc\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex\r\ncf-cache-status: DYNAMIC\r\nset-cookie: go=1; Path=/; Max-Age=600; Expires=Sat, 19 Apr 2025 05:08:35 GMT\r\ncf-ray: 9329d3e1a87eb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":945,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T03:57:29.375322Z","times_seen":17829662,"resource_available":true,"data":null}},"time_used":3172,"timings":{"blocked":1514,"dns":1240,"connect":1,"send":0,"wait":144,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-19","alert":"Sinkholed","trigger":"kkra28.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/cdn-cgi/images/trace/managed/nojs/transparent.gif?ray=794d630be9c098f7","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krla30.at/","date":"2025-04-19T04:58:37.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krla30.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Apr 2025 06:06:27 GMT","end":"Thu, 17 Jul 2025 07:05:00 GMT"},"fingerprint":{"sha1":"27:71:A6:83:DF:29:59:74:F8:8F:0D:EA:54:7E:7C:B0:44:45:AD:E8","sha256":"F1:C5:3B:BF:25:E3:9E:72:14:77:7C:22:69:81:AE:CA:11:FF:56:EA:FC:C6:19:2E:D9:12:EA:E3:AB:DA:53:A4"}}},"request":{"raw":"GET /cdn-cgi/images/trace/managed/nojs/transparent.gif?ray=794d630be9c098f7 HTTP/1.1\r\nHost: krla30.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krla30.at/\r\nCookie: http_refererq2=https%3A%2F%2Fkkra28.cc; tor_scheme_id=1745137543; tor_port=9095; session_id=43e8a25b0aed98da22c1e1a60b09ff53; session_id_e=8958f25859bc51a00f882ec34b4cd5f9; connecting_hash_lite_version=1745038715; connecting_hash=1830f166feeb78d4dc07d738e6ecfd21; onion_server_id=7; session_temp_active=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 19 Apr 2025 04:58:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9329d3f07a60712b-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":151,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-10T11:32:50.244534Z","times_seen":19415,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krla30.at/favicon.ico","fqdn":"krla30.at","domain":"krla30.at","tld":"at"},"ip":{"addr":"104.21.7.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://krla30.at/","date":"2025-04-19T04:58:37.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krla30.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Apr 2025 06:06:27 GMT","end":"Thu, 17 Jul 2025 07:05:00 GMT"},"fingerprint":{"sha1":"27:71:A6:83:DF:29:59:74:F8:8F:0D:EA:54:7E:7C:B0:44:45:AD:E8","sha256":"F1:C5:3B:BF:25:E3:9E:72:14:77:7C:22:69:81:AE:CA:11:FF:56:EA:FC:C6:19:2E:D9:12:EA:E3:AB:DA:53:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krla30.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krla30.at/\r\nCookie: http_refererq2=https%3A%2F%2Fkkra28.cc; tor_scheme_id=1745137543; tor_port=9095; session_id=43e8a25b0aed98da22c1e1a60b09ff53; session_id_e=8958f25859bc51a00f882ec34b4cd5f9; connecting_hash_lite_version=1745038715; connecting_hash=1830f166feeb78d4dc07d738e6ecfd21; onion_server_id=7; session_temp_active=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Apr 2025 04:58:37 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y%2B3479grtAtOEGoivba1F%2B3%2BqqM9iXGM%2BLzD6SWjpq1rMmP3DIjXTzmwWY%2BYsuuj4QHtUgqNf%2BRy8DDXSa%2B8RzxbokqMHF24qa2ZydRBtM%2FFCOT%2Fw0D7GXAKLRc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 09 Feb 2025 16:09:29 GMT\r\netag: W/\"256-62db7d10c4fa0\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\ncontent-encoding: br\r\ncf-ray: 9329d3f14a61712b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6139\u0026min_rtt=748\u0026rtt_var=4273\u0026sent=116\u0026recv=127\u0026lost=0\u0026retrans=0\u0026sent_bytes=27582\u0026recv_bytes=10589\u0026delivery_rate=272542\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=b6c6ac8da216c21c\u0026ts=1919\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":598,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-08-10T14:37:19.510425Z","times_seen":3804,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}