{"report_id":"cff3e10b-8daf-4e0e-a2ed-1f6560b4a2a5","version":6,"status":"done","tags":[],"date":"2025-06-26T04:53:25Z","url":{"schema":"http","addr":"kra33c.cc/","fqdn":"kra33c.cc","domain":"kra33c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"http","addr":"kra34c.cc/","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"title":"Kra34.cc"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T04:53:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"kra33c.cc","ip":{"addr":"196.251.90.209","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"2025-03-14","domain_rank":0,"first_seen":"2025-06-12T03:35:18.782921Z","last_seen":"2025-06-12T03:35:18.782921Z","alert_count":1,"request_count":1,"received_data":27595,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kra34c.cc","ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"2025-03-14","domain_rank":0,"first_seen":"2025-06-12T03:35:18.788501Z","last_seen":"2025-06-12T03:35:18.788501Z","alert_count":3,"request_count":3,"received_data":30664,"sent_data":1323,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-06-25T15:13:02.145307Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-06-25T15:09:27.674037Z","alert_count":0,"request_count":2,"received_data":68866,"sent_data":1099,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-26T04:53:02Z","timestamp":1750913582,"ip_dst":{"addr":"172.18.0.3","port":34186,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.90.209","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 40","source":"{\"timestamp\":\"2025-06-26T04:53:02.856848+0000\",\"flow_id\":22041003477840,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.90.209\",\"src_port\":443,\"dest_ip\":\"172.18.0.3\",\"dest_port\":34186,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400039,\"rev\":4335,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 40\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_05_07\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-06-26T04:53:02.838480+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-26T04:53:16Z","timestamp":1750913596,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.3","port":49532,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-06-26T04:53:16.039208+0000\",\"flow_id\":1726223884246376,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":49532,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"server-referr.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":472,\"bytes_toclient\":116,\"start\":\"2025-06-26T04:49:48.613736+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra34c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra34c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra34c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra33c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"kra34c.cc/","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"80822ec2f81022400a77ec834ce11a10","sha1":"84b5d3591b23f154feed3411f8dcc1f23a43cfe4","sha256":"81281ced3dfa57118785d7725354aa7c490bb240e148774f8b8c793795b6da84","sha512":"ab86cf01c29303709a63d4d196cfcd76165ccf470d896f8c19552b6e371c82bbbf42fc53360c8265aaf7bc4d8bf9142b8226be1c539459f703f38eaa6ccee50b","ssdeep":"","tlshash":"8d41dd1619e7188a1a13715a4e46f80878e720bf3b73db11be2d1b9c3fe1474c1527c9","size":2137,"data":"","first_seen":"2023-11-18T09:38:17Z","last_seen":"2025-11-11T15:34:14.429667Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"kra34c.cc/","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"59198b4ba9e14f89d81915acbc93e711","sha1":"b1d45ac9daefda838a44e7c268516d774eeea384","sha256":"236a50a558a0e28f132dd5c527962c73121e4f65cd3feeb05bf4968a5982486f","sha512":"66720fa4db11524e1091c48509cae0bacfc29c73f143d2b069cbf2ed324e7a52e62db72a7bf9d2d164ab0ff6a2ba801c46a1749e73d6949ac8169d710af806f7","ssdeep":"","tlshash":"9801684691b42802801139a23992f25a398ad03d76d35682a78e0998bee2473c323b7f","size":742,"data":"","first_seen":"2025-05-28T07:34:51.913323Z","last_seen":"2025-11-11T15:34:14.430294Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"kra34c.cc/","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3caf6b67ffd10636118a64b1204f457","sha1":"297496c507b1d26404bbe20da458eabdc1353120","sha256":"386a82eda00a55cddb3379215719861e6fa3ce170edc6aadd67d83696f659f7a","sha512":"5194ce5decf119bcfe91f1f11757fd0b826e6c30e8aeef625a4ec3193b2a30962d29c5ccf9d6d5b3d8f653bfa8d9bd8793a2831529372fa75fddf87127179c41","ssdeep":"","tlshash":"e6f00e952cdc84244373012527bb9158b43969292c0aed54f94c84812f99eac08bb90c","size":514,"data":"","first_seen":"2024-12-21T06:53:37.204575Z","last_seen":"2025-11-11T15:34:14.431212Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"kra34c.cc/","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-26T04:53:02.919Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: kra34c.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.1\r\nDate: Thu, 26 Jun 2025 04:53:03 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 27366\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"6ae6-diZQ5rje6lzdNE7GlUOXn3FMjiw\"\r\nSet-Cookie: connect.sid=s%3ApOmcV6p0aSBUbQURfyox61XFwgFGPiAd.ZRXu0ldUuCEEx2jTdpJlWBNJ2E9XIT3IjSpE3GadP54; Path=/; Expires=Thu, 26 Jun 2025 10:53:03 GMT; HttpOnly\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27366,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15966)","md5":"8d5434a3a3448cbc1a7b43a028f6ad59","sha1":"9d9b93c1067f1846f74bf8b39f049250fabf7c91","sha256":"80885be9b497e351010b33f523dd978d2c5fb0183b4b67265adf5227592f867b","sha512":"aa12678dcf7a2dd92b3a24d1ab6dfe62f7fe9ba85b1adb0bb1915c1d798da6d8eac90f019e0b768be3388ddb3b43e152d1eb1d3326f61338155d5d65192e03be","ssdeep":"384:HncQ0BJGkrEm99j65/qTqVB6I46Ish4geiA6Ih/IJ2Z+dutl8mnUiyF+:kBJGkrpqH6IU7DN/IYZ+ONnUpF+","tlshash":"68c29e5158bb244a15027036de16be0a7ca6403f672fdb503a9c2aed7fd20d8c6b174e","first_seen":"2025-06-26T04:53:26.632832Z","last_seen":"2025-06-26T04:53:26.632832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":409,"dns":138,"connect":271,"send":0,"wait":54,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra34c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://kra34c.cc/","date":"2025-06-26T04:53:03.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://kra34c.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Jun 2025 04:53:03 GMT\r\ndate: Thu, 26 Jun 2025 04:53:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dac220f57a143d451efb35a693ad1193","sha1":"01bf3d5cede5c698e109759554dfaabc32219caf","sha256":"81173243f2186d5d50ec00944139c2c5ed2bf32addb74bce14bf521df131b573","sha512":"a2c3a36c994ede2118ae347d7feb525539ff8f22eb4d482a7989986464f996b341b928ee17e07ce40b6385b1189188f6418ad6421e6d42f21ead8dd5287c2ae1","ssdeep":"192:wxAZgq3lblifxNktq346lDYxOLuq3/pl8CxEtkq3RXlGV:Ye0bGohCI","tlshash":"9d227b92402b9500ab971cc233cf7f3aaece10896485d1b96ff90cd59ceeda6436875d","first_seen":"2025-05-31T01:52:15.990083Z","last_seen":"2025-09-10T14:47:38.012713Z","times_seen":242,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":105,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://kra34c.cc/","date":"2025-06-26T04:53:03.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://kra34c.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 18:01:22 GMT\r\nexpires: Fri, 19 Jun 2026 18:01:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 557502\r\nlast-modified: Wed, 28 May 2025 18:54:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18664, version 1.0","md5":"be9f418664929cb873436f8f4b5b5beb","sha1":"1a47d6de5c3f88415b0522609694be08fb954a66","sha256":"3f8137d61fbd7fb1e0f5b2dc67c6995a95cdd74fa132d1879c7db0a3bd270399","sha512":"926d942e5d24c399d0af1ebc1fc3a69a2c3de45d875e4fcf036780a6ba3db49a282f3482b400a5313af0ed02df47f45e60557a21e6ed97af8ea5ef00edd62da0","ssdeep":"384:teSiWRmlH5p4G/AhlCVQIy79ydeYYkfGwJJ9Irz3mHrEG1o:tXpmlZ7AfCW9yoYVfGWirzWHrxo","tlshash":"8482e007f5fe033cfbcc55791af68eaa76a7b70694381b9c3a5455a351db0008c26c98","first_seen":"2025-01-27T07:37:51.835019Z","last_seen":"2026-07-06T23:36:27.160386Z","times_seen":1219,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":101,"dns":10,"connect":32,"send":0,"wait":68,"receive":10,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://kra34c.cc/","date":"2025-06-26T04:53:03.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://kra34c.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 17:14:45 GMT\r\nexpires: Fri, 19 Jun 2026 17:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 560299\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T01:50:47.760305Z","times_seen":244284,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":103,"dns":6,"connect":28,"send":0,"wait":29,"receive":39,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"kra34c.cc/img/favicon/favicon-16x16.png","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"","requested_by":"http://kra34c.cc/","date":"2025-06-26T04:53:04.224Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/favicon/favicon-16x16.png HTTP/1.1\r\nHost: kra34c.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://kra34c.cc/\r\nCookie: connect.sid=s%3ApOmcV6p0aSBUbQURfyox61XFwgFGPiAd.ZRXu0ldUuCEEx2jTdpJlWBNJ2E9XIT3IjSpE3GadP54\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.1\r\nDate: Thu, 26 Jun 2025 04:53:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 598\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=0\r\nLast-Modified: Thu, 31 Oct 2024 19:59:28 GMT\r\nETag: W/\"256-192e4295be9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-07-22T17:23:02.659981Z","times_seen":3747,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":1,"connect":271,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra34c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kra34c.cc/img/favicon/apple-touch-icon.png","fqdn":"kra34c.cc","domain":"kra34c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"","requested_by":"http://kra34c.cc/","date":"2025-06-26T04:53:04.222Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: kra34c.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://kra34c.cc/\r\nCookie: connect.sid=s%3ApOmcV6p0aSBUbQURfyox61XFwgFGPiAd.ZRXu0ldUuCEEx2jTdpJlWBNJ2E9XIT3IjSpE3GadP54\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.1\r\nDate: Thu, 26 Jun 2025 04:53:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1682\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=0\r\nLast-Modified: Thu, 31 Oct 2024 19:59:28 GMT\r\nETag: W/\"692-192e4295be9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit gray+alpha, non-interlaced","md5":"b957a36af1ffb7e36b68b78fc32355b3","sha1":"bb1cd5868593ac87696582406a224abe43ba5954","sha256":"967786cf30607bfa2d0ba82c1ef477aef72f79a750de597c605e9c1caf6d2abe","sha512":"62ee631b8c80350bf2b13be08a09a76b0a40717d8eaf3f9985385f038b710e2bb193a4f4fe6fde573313fc8e18042afa193113c98df4fc3cf500996c46bf222c","ssdeep":"","tlshash":"b831f8d38538ba76890b7f11711d12e16cb6618b1e020496f8fcdac0be2ba884199b42","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-06-10T12:14:11.961674Z","times_seen":65,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra34c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kra33c.cc/","fqdn":"kra33c.cc","domain":"kra33c.cc","tld":"cc"},"ip":{"addr":"196.251.90.209","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-26T04:53:02.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kra33c.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Jun 2025 08:23:23 GMT","end":"Tue, 09 Sep 2025 08:23:22 GMT"},"fingerprint":{"sha1":"8C:C1:FC:03:67:8A:D2:07:B9:8F:75:97:37:0E:11:81:24:1C:9A:86","sha256":"15:73:F9:18:92:B7:54:62:1E:8F:7F:86:23:C5:90:FD:4A:4B:53:3F:9D:6B:8B:AF:28:A2:E5:26:C4:02:B7:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kra33c.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx/1.27.1\r\ndate: Thu, 26 Jun 2025 04:53:02 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nlocation: http://kra34c.cc/\r\nstrict-transport-security: max-age=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":27366,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T01:50:58.104205Z","times_seen":17490279,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":70,"dns":15,"connect":19,"send":0,"wait":20,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-26","alert":"Sinkholed","trigger":"kra33c.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}