{"report_id":"c96e577c-fda3-41fa-a285-9b4368b43a1f","version":6,"status":"done","tags":[],"date":"2024-12-21T20:54:30Z","url":{"schema":"http","addr":"kra18f.cc/","fqdn":"kra18f.cc","domain":"kra18f.cc","tld":"cc"},"ip":{"addr":"172.67.178.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kra21c.cc/","fqdn":"kra21c.cc","domain":"kra21c.cc","tld":"cc"},"title":"Kra21.cc"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-01T20:54:30Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"kra18f.cc","ip":{"addr":"172.67.178.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":787,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2024-12-18T01:33:35.417727Z","alert_count":0,"request_count":1,"received_data":1897,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kra21c.cc","ip":{"addr":"172.67.187.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-12-12","domain_rank":0,"first_seen":"2024-12-21T06:53:33.47111Z","last_seen":"2024-12-21T06:53:33.47111Z","alert_count":3,"request_count":3,"received_data":30766,"sent_data":1559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2024-12-18T01:36:49.035008Z","alert_count":0,"request_count":2,"received_data":68848,"sent_data":1057,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-21","alert":"Sinkholed","trigger":"kra21c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-21","alert":"Sinkholed","trigger":"kra21c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-21","alert":"Sinkholed","trigger":"kra21c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kra21c.cc/","fqdn":"kra21c.cc","domain":"kra21c.cc","tld":"cc"},"ip":{"addr":"172.67.187.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"80822ec2f81022400a77ec834ce11a10","sha1":"84b5d3591b23f154feed3411f8dcc1f23a43cfe4","sha256":"81281ced3dfa57118785d7725354aa7c490bb240e148774f8b8c793795b6da84","sha512":"ab86cf01c29303709a63d4d196cfcd76165ccf470d896f8c19552b6e371c82bbbf42fc53360c8265aaf7bc4d8bf9142b8226be1c539459f703f38eaa6ccee50b","ssdeep":"","tlshash":"8d41dd1619e7188a1a13715a4e46f80878e720bf3b73db11be2d1b9c3fe1474c1527c9","size":2137,"data":"","first_seen":"2023-11-18T09:38:17Z","last_seen":"2025-11-11T15:34:14.429667Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra21c.cc/","fqdn":"kra21c.cc","domain":"kra21c.cc","tld":"cc"},"ip":{"addr":"172.67.187.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3caf6b67ffd10636118a64b1204f457","sha1":"297496c507b1d26404bbe20da458eabdc1353120","sha256":"386a82eda00a55cddb3379215719861e6fa3ce170edc6aadd67d83696f659f7a","sha512":"5194ce5decf119bcfe91f1f11757fd0b826e6c30e8aeef625a4ec3193b2a30962d29c5ccf9d6d5b3d8f653bfa8d9bd8793a2831529372fa75fddf87127179c41","ssdeep":"","tlshash":"e6f00e952cdc84244373012527bb9158b43969292c0aed54f94c84812f99eac08bb90c","size":514,"data":"","first_seen":"2024-12-21T06:53:37.204575Z","last_seen":"2025-11-11T15:34:14.431212Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kra18f.cc/","fqdn":"kra18f.cc","domain":"kra18f.cc","tld":"cc"},"ip":{"addr":"172.67.178.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-21T20:54:05.266Z","timestamp":1734814445266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra18f.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Nov 2024 17:03:57 GMT","end":"Sun, 16 Feb 2025 17:03:56 GMT"},"fingerprint":{"sha1":"28:15:64:E7:E0:15:1E:83:7C:94:BF:DA:9D:95:D0:77:BC:83:C8:6E","sha256":"FE:BE:5E:32:CF:32:E3:EA:63:D2:2B:78:8A:3F:7E:8A:2F:B7:89:44:4C:69:75:95:2C:B8:9B:D0:D9:19:47:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kra18f.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 21 Dec 2024 20:54:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://kra21c.cc/\r\ncache-control: max-age=3600\r\nexpires: Sat, 21 Dec 2024 21:54:05 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uHZJcvye1nWGFmsvXSTuXxCJ7ZIEtgFe7gMM%2Fa8jBBpa1RhjFn31XGbsJkTmZA9vGq%2FHA4oQNohIabyl78W1CYJILHAWNUeVCp2XsdVHIxMQIUVO0pKeHrPUv48%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f5ac3eb5be40b02-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":167,"size_decoded":167,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0104c301c5e02bd6148b8703d19b3a73","sha1":"7436e0b4b1f8c222c38069890b75fa2baf9ca620","sha256":"446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f","sha512":"84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf","ssdeep":"","tlshash":"c4c08cad6b523c98b8a73b3960c3a1a0e2ec803022d9042202b04a07f0cb1e78ec23d1","first_seen":"2023-04-05T06:32:17Z","last_seen":"2026-06-13T22:25:52.376655Z","times_seen":190495,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":66,"dns":19,"connect":1,"send":0,"wait":5,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kra21c.cc/","date":"2024-12-21T20:54:05.809Z","timestamp":1734814445809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:36:58 GMT","end":"Mon, 24 Feb 2025 08:36:57 GMT"},"fingerprint":{"sha1":"30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D","sha256":"7D:F5:AB:9A:97:34:D8:88:D9:F0:60:60:A2:9D:D1:4F:BF:36:29:43:AA:5D:4E:48:B3:17:0C:A5:B7:05:FF:BF"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra21c.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Dec 2024 20:54:05 GMT\r\ndate: Sat, 21 Dec 2024 20:54:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1213,"size_decoded":1213,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"8b1677495e2157dabf1a28ca23cba6cf","sha1":"e90895e6065d448c844c252f1465db0d07754591","sha256":"e610a512937a9796e9f7d3c6a532e0b4e48e213ee26a3e29a361b2b9dfe4f4fc","sha512":"793346de4a0beafbf78a3adb8d535371f3d5c133d9c50b159223056b341a7b899cbd7b59d429db17268979137226ceab97796d644949e9598dc547546d4e3660","ssdeep":"","tlshash":"2321b75830d57e36dd2641b9360da02eab186210b4afd8107c91beb4da1af02b79d1b6","first_seen":"2024-12-21T20:54:34.240689Z","last_seen":"2024-12-22T13:15:26.407308Z","times_seen":4,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":99,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra21c.cc/img/favicon/apple-touch-icon.png","fqdn":"kra21c.cc","domain":"kra21c.cc","tld":"cc"},"ip":{"addr":"172.67.187.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra21c.cc/","date":"2024-12-21T20:54:06.019Z","timestamp":1734814446019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra21c.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 14:36:52 GMT","end":"Sun, 16 Mar 2025 15:35:36 GMT"},"fingerprint":{"sha1":"E1:E5:4C:C9:0C:C0:07:30:F6:A0:00:4E:1A:CE:AC:01:FD:A8:B2:A8","sha256":"00:00:45:49:A6:08:CA:C5:5C:44:56:EF:23:37:33:1C:AE:A8:49:8F:88:F1:8C:44:3D:2D:EE:C3:7F:28:EE:1C"}}},"request":{"raw":"GET /img/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: kra21c.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra21c.cc/\r\nCookie: connect.sid=s%3ABZD6_p8t43Gl9NRhBjKMlXF_cpvHZk9W.OcV0vnSRGmwOoyJwMx9K5Fa63E12CtnEzvWM0FrqAGQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Dec 2024 20:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1682\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 31 Oct 2024 19:59:28 GMT\r\netag: W/\"692-192e4295be9\"\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=45F9nI1ZkRfHM6SFYTYW4cgboh%2FHmnGxHKxxQwgdqBdkmMrw14CmWKWrt2WyxdhaSKgIzfbkdSjqLJ0Pujb0KDrBTGCymf9dHQDKpDmT4sI9cjUss59%2BhkOJSzk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f5ac3ef9debb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6047\u0026min_rtt=1856\u0026rtt_var=3689\u0026sent=12\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=4059\u0026recv_bytes=1524\u0026delivery_rate=319913\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2f647497bb26bd81\u0026ts=477\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1682,"size_decoded":1682,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit gray+alpha, non-interlaced","md5":"b957a36af1ffb7e36b68b78fc32355b3","sha1":"bb1cd5868593ac87696582406a224abe43ba5954","sha256":"967786cf30607bfa2d0ba82c1ef477aef72f79a750de597c605e9c1caf6d2abe","sha512":"62ee631b8c80350bf2b13be08a09a76b0a40717d8eaf3f9985385f038b710e2bb193a4f4fe6fde573313fc8e18042afa193113c98df4fc3cf500996c46bf222c","ssdeep":"","tlshash":"b831f8d38538ba76890b7f11711d12e16cb6618b1e020496f8fcdac0be2ba884199b42","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-06-10T12:14:11.961674Z","times_seen":65,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-21","alert":"Sinkholed","trigger":"kra21c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra21c.cc/img/favicon/favicon-16x16.png","fqdn":"kra21c.cc","domain":"kra21c.cc","tld":"cc"},"ip":{"addr":"172.67.187.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kra21c.cc/","date":"2024-12-21T20:54:06.022Z","timestamp":1734814446022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra21c.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 14:36:52 GMT","end":"Sun, 16 Mar 2025 15:35:36 GMT"},"fingerprint":{"sha1":"E1:E5:4C:C9:0C:C0:07:30:F6:A0:00:4E:1A:CE:AC:01:FD:A8:B2:A8","sha256":"00:00:45:49:A6:08:CA:C5:5C:44:56:EF:23:37:33:1C:AE:A8:49:8F:88:F1:8C:44:3D:2D:EE:C3:7F:28:EE:1C"}}},"request":{"raw":"GET /img/favicon/favicon-16x16.png HTTP/1.1\r\nHost: kra21c.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kra21c.cc/\r\nCookie: connect.sid=s%3ABZD6_p8t43Gl9NRhBjKMlXF_cpvHZk9W.OcV0vnSRGmwOoyJwMx9K5Fa63E12CtnEzvWM0FrqAGQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Dec 2024 20:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 598\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 31 Oct 2024 19:59:28 GMT\r\netag: W/\"256-192e4295be9\"\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BRlMTNuL3H4b0T5CJ%2BMatW5M5FMtcNWzcDb0gTxKxYuJ%2B6fg8ciYPCAcUYIh7ly%2FGsmbf4PH8Ov2ElTAxifpIYS5gn%2FxIA7NmGtm%2FKOjRAYjbSojz8oza2nHYk4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f5ac3ef9decb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5527\u0026min_rtt=1856\u0026rtt_var=3808\u0026sent=15\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=6551\u0026recv_bytes=1568\u0026delivery_rate=5544\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=2f647497bb26bd81\u0026ts=490\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":598,"size_decoded":598,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-07-21T12:02:27.316599Z","times_seen":3744,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-21","alert":"Sinkholed","trigger":"kra21c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra21c.cc/","date":"2024-12-21T20:54:06.029Z","timestamp":1734814446029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:36:58 GMT","end":"Mon, 24 Feb 2025 08:36:57 GMT"},"fingerprint":{"sha1":"40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF","sha256":"0C:0D:EC:55:A6:58:72:97:20:B5:7E:DB:CB:E9:4D:9D:F8:CA:76:37:D0:6A:16:15:D3:64:D6:47:3C:D1:A9:30"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kra21c.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Dec 2024 18:53:03 GMT\r\nexpires: Sat, 20 Dec 2025 18:53:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93663\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48444,"size_decoded":48444,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-07-21T23:04:14.008941Z","times_seen":23390,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":84,"dns":1,"connect":20,"send":0,"wait":21,"receive":29,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kra21c.cc/","date":"2024-12-21T20:54:06.030Z","timestamp":1734814446030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:36:58 GMT","end":"Mon, 24 Feb 2025 08:36:57 GMT"},"fingerprint":{"sha1":"40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF","sha256":"0C:0D:EC:55:A6:58:72:97:20:B5:7E:DB:CB:E9:4D:9D:F8:CA:76:37:D0:6A:16:15:D3:64:D6:47:3C:D1:A9:30"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kra21c.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 21 Dec 2024 04:17:01 GMT\r\nexpires: Sun, 21 Dec 2025 04:17:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59825\r\nlast-modified: Mon, 29 Jul 2024 22:47:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18740,"size_decoded":18740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18740, version 1.0","md5":"06ab411342acdbfe3e746ee904e12cc5","sha1":"d83a47942575eeb80d30ebc7bf9a5b6f83c930fb","sha256":"62cc01daef72c3ea76a258445368d2f4ab8d05a91f91c53fd12f7c42e3325942","sha512":"6dc7ae210dc6578115ac9a4b78431be0f3f767684d3088ff5cd8094d1ce37756ce606571f325e6c97757dffe012d491792efac56efce2fb7a4fce9a7137cfc19","ssdeep":"384:AtbXebWepTmCSQiXLGg63eWz5WkPvRhc4Xci8yxpMNG:Adfeg9LGgHa3vRhj58yQNG","tlshash":"b082d05018f7583df26d8ab0279bb89e1b19bb7ff601d48e41319d4318f193846578af","first_seen":"2024-08-01T04:50:43Z","last_seen":"2026-07-19T21:33:33.674297Z","times_seen":950,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":97,"dns":0,"connect":22,"send":0,"wait":37,"receive":7,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kra21c.cc/","fqdn":"kra21c.cc","domain":"kra21c.cc","tld":"cc"},"ip":{"addr":"172.67.187.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-21T20:54:05.371Z","timestamp":1734814445371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra21c.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 14:36:52 GMT","end":"Sun, 16 Mar 2025 15:35:36 GMT"},"fingerprint":{"sha1":"E1:E5:4C:C9:0C:C0:07:30:F6:A0:00:4E:1A:CE:AC:01:FD:A8:B2:A8","sha256":"00:00:45:49:A6:08:CA:C5:5C:44:56:EF:23:37:33:1C:AE:A8:49:8F:88:F1:8C:44:3D:2D:EE:C3:7F:28:EE:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kra21c.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Dec 2024 20:54:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\nset-cookie: connect.sid=s%3ABZD6_p8t43Gl9NRhBjKMlXF_cpvHZk9W.OcV0vnSRGmwOoyJwMx9K5Fa63E12CtnEzvWM0FrqAGQ; Path=/; Expires=Sun, 22 Dec 2024 02:54:05 GMT; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h2ghCZ9v0ItzPA%2FeajUocqidliHmv6jgv0%2B9FAaB0N8R1mmo%2FdMggHm%2FjLS3HjVFeNUICl3XPV%2Bf6Y7sh95tG5Te9GYz%2F2GTR0QYph7KvCZRwgigbib84TdBxTA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f5ac3ebfddfb503-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6474\u0026min_rtt=513\u0026rtt_var=11940\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3193\u0026recv_bytes=1113\u0026delivery_rate=7144736\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=cdfd5586a9cadc75\u0026ts=210\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25586,"size_decoded":25586,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T22:24:25.64076Z","times_seen":17433138,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":61,"dns":39,"connect":1,"send":0,"wait":192,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-21","alert":"Sinkholed","trigger":"kra21c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}