{"report_id":"d0f3c500-2e7b-40a5-833e-8bf95986f73f","version":6,"status":"done","tags":[],"date":"2026-04-05T09:39:46Z","url":{"schema":"http","addr":"cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/","fqdn":"cracked.ax","domain":"cracked.ax","tld":"ax"},"ip":{"addr":"185.129.103.102","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/","fqdn":"cracked.ax","domain":"cracked.ax","tld":"ax"},"title":"404 Not Found","dom":{"size":138,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bc0703be001240bdd8a6e6ff16f19596","sha1":"7c799396b652deaf4fd4f48d01a332f11053388d","sha256":"af4a14c499b3b3e29c366984c00d84d24a78c69975055354cfa0f093f436c1bc","sha512":"f05fa334d0fa4afaee7f0b4688b895c409d25d69014088e876201824f3d60311b0f4df366aec96f260110936704205ff9f5a84e8470bd441dec4b62ad0575da5","ssdeep":"","tlshash":"38c02b0d74636148dd03115017c33240c488c33f685ac01008028483b0cf2bac4c23a5","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/","fqdn":"cracked.ax","domain":"cracked.ax","tld":"ax"},"ip":{"addr":"185.129.103.102","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-10T09:39:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"cracked.ax","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cracked.ax","ip":{"addr":"185.129.103.102","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-03-25T07:19:30.280545Z","last_seen":"2026-04-05T00:17:14.967679Z","alert_count":3,"request_count":3,"received_data":32330,"sent_data":1803,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/","fqdn":"cracked.ax","domain":"cracked.ax","tld":"ax"},"ip":{"addr":"185.129.103.102","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T09:39:24.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cracked.ax","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 09:00:14 GMT","end":"Mon, 22 Jun 2026 09:00:13 GMT"},"fingerprint":{"sha1":"AA:9D:8B:53:CA:E6:C0:E6:A5:49:67:6C:0D:93:8D:BD:A9:0B:FF:AE","sha256":"0B:47:75:AE:42:51:DB:92:BB:38:DD:BB:8E:35:36:A6:3C:D5:32:BF:27:93:2E:A1:1C:EA:4E:32:C3:FA:82:67"}}},"request":{"raw":"GET /Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/ HTTP/1.1\r\nHost: cracked.ax\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=asX0TgFJj9qr07Ej; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:24 GMT\n__ddg10_=1775381964; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:24 GMT\n__ddg1_=tRhbVpGsZ13U0njpP8FD; Domain=.cracked.ax; HttpOnly; Path=/; Expires=Mon, 05-Apr-2027 09:39:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 05 Apr 2026 09:39:24 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T16:48:12.527197Z","times_seen":479782,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":78,"dns":1,"connect":18,"send":0,"wait":224,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"cracked.ax","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/","fqdn":"cracked.ax","domain":"cracked.ax","tld":"ax"},"ip":{"addr":"185.129.103.102","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T09:39:24.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cracked.ax","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 09:00:14 GMT","end":"Mon, 22 Jun 2026 09:00:13 GMT"},"fingerprint":{"sha1":"AA:9D:8B:53:CA:E6:C0:E6:A5:49:67:6C:0D:93:8D:BD:A9:0B:FF:AE","sha256":"0B:47:75:AE:42:51:DB:92:BB:38:DD:BB:8E:35:36:A6:3C:D5:32:BF:27:93:2E:A1:1C:EA:4E:32:C3:FA:82:67"}}},"request":{"raw":"GET /Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/ HTTP/1.1\r\nHost: cracked.ax\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=asX0TgFJj9qr07Ej; __ddg10_=1775381964; __ddg9_=91.90.42.154; __ddg1_=tRhbVpGsZ13U0njpP8FD\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b3IPONVhXTHEVUFC; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:24 GMT\n__ddg10_=1775381964; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 05 Apr 2026 09:39:24 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T16:48:12.527197Z","times_seen":479782,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"cracked.ax","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cracked.ax/favicon.ico","fqdn":"cracked.ax","domain":"cracked.ax","tld":"ax"},"ip":{"addr":"185.129.103.102","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/","date":"2026-04-05T09:39:25.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cracked.ax","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 09:00:14 GMT","end":"Mon, 22 Jun 2026 09:00:13 GMT"},"fingerprint":{"sha1":"AA:9D:8B:53:CA:E6:C0:E6:A5:49:67:6C:0D:93:8D:BD:A9:0B:FF:AE","sha256":"0B:47:75:AE:42:51:DB:92:BB:38:DD:BB:8E:35:36:A6:3C:D5:32:BF:27:93:2E:A1:1C:EA:4E:32:C3:FA:82:67"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cracked.ax\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cracked.ax/Thread-27x-Thailand-VALID-WhatsApp-MOBILE-GENDER-AGE-PFP-28-03-2027/\r\nCookie: __ddg8_=b3IPONVhXTHEVUFC; __ddg10_=1775381964; __ddg9_=91.90.42.154; __ddg1_=tRhbVpGsZ13U0njpP8FD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Zp3EVnznqMvMQxYI; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:25 GMT\n__ddg10_=1775381965; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.cracked.ax; Path=/; Expires=Sun, 05-Apr-2026 09:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Apr 2026 02:50:31 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 03 Aug 2021 20:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6109a78c-75c5\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nage: 110935\r\ncontent-length: 17987\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30149,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"0df4d1a7e71b90ff6217091e54a84b5f","sha1":"6e54d8e75b49e84c273db8354eb564ea4dcaaa87","sha256":"802d7aad83de10d6219b0f15bc72aee8313b7d1f21e9cc35c18f826c51b000cb","sha512":"229334b32a7533520b1f53e305f5a67d35865ac9f17e7214b05236cea18927892056b5131092280c824ebfc1c923d15e0942c65fac21670d0c471f37e462c156","ssdeep":"768:2Fz3H4b+Xm/HbO7goipk1S9KpGTAhqtUnW:2R4bZ/C7tipoS9/aqtEW","tlshash":"b7d248bbec5a1007c08833facdd58ba541df88fa0bbd0f962e8d1a5d99973e0d352651","first_seen":"2023-05-19T22:26:41Z","last_seen":"2026-04-05T09:39:47.557454Z","times_seen":58,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"cracked.ax","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}