{"report_id":"e3797ac2-0a73-4b07-9cdc-3499d9a65b67","version":6,"status":"done","tags":[],"date":"2025-06-19T06:29:16Z","url":{"schema":"http","addr":"kraken38-at.com/","fqdn":"kraken38-at.com","domain":"kraken38-at.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kraken39at.com/","fqdn":"kraken39at.com","domain":"kraken39at.com","tld":"com"},"title":"KRAKEN"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-28T06:29:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"captcha.kraken50at.com","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-10","domain_rank":0,"first_seen":"2025-02-24T02:01:59.456544Z","last_seen":"2025-06-10T09:51:52.076949Z","alert_count":0,"request_count":2,"received_data":8564,"sent_data":1146,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kraken38-at.com","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-13","domain_rank":0,"first_seen":"2025-06-19T06:29:16.896218Z","last_seen":"2025-06-19T06:29:16.896218Z","alert_count":0,"request_count":2,"received_data":11004,"sent_data":910,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kraken-zerkalo.org","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-25","domain_rank":0,"first_seen":"2025-01-22T02:45:14.41464Z","last_seen":"2025-06-10T09:51:51.551687Z","alert_count":0,"request_count":2,"received_data":1384,"sent_data":869,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kraken39at.com","ip":{"addr":"104.21.32.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-09","domain_rank":0,"first_seen":"2025-06-10T09:51:51.036083Z","last_seen":"2025-06-10T09:51:51.036083Z","alert_count":4,"request_count":4,"received_data":40422,"sent_data":1915,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"captcha.kraken50at.com/login?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=KRAKEN\u0026landing_url=kraken38-at.com%2F\u0026name=_XrYQpTLT9DSVktyS\u0026host=https%3A%2F%2Fcaptcha.kraken50at.com%2Flogin","fqdn":"captcha.kraken50at.com","domain":"kraken50at.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33c83a3cea974a24950523c39752953","sha1":"9292431c46be37b3df13ba0b72fec021f0f4cb44","sha256":"600fb2ac65863bfca71e44daca1ab9c041d4204bbba0348fae7fbf469bf2d52c","sha512":"bfc908e91330704c2df07d0343ca4076069f3135ba6bfb5d5abbf121bc42528c65e6d52c38a6c605e859f10b0eca93ce2bc4519af8fa938f1f98c0759c23da19","ssdeep":"","tlshash":"f871727b7469bdb2034294e0802b5226f93a48a8f15f90f4f379e4d52cf880e4179fb6","size":3574,"data":"","first_seen":"2025-06-19T06:29:20.122395Z","last_seen":"2025-06-19T06:29:20.122395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dac98dd87f5f9c4233c05d3f0906059","sha1":"2b6c5a2bfe7fb2911cbecbcdeba0ac2b8f436cd1","sha256":"f6409afe48fdf2c34f342f7fa69a2a843ae9d2bbfb8def2c892c8942d56cd754","sha512":"f303124b62ec0a2ad1adec7be6394c96ffbe653c52e570b031b8e1c187ce3166e1b8ff6b8a9a275638cab6105a4fe0cbc2e9d7350ef87f93411338b011ae3eaa","ssdeep":"","tlshash":"1241d0a91827066015e7613abbefb665b37521334814d501bb4e50d0ffa052a6774be8","size":2222,"data":"","first_seen":"2025-05-14T17:51:50.011392Z","last_seen":"2025-07-04T01:00:50.820695Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken39at.com/","fqdn":"kraken39at.com","domain":"kraken39at.com","tld":"com"},"ip":{"addr":"104.21.32.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"273a567817a222ea36919fed78ed00ab","sha1":"f06cf879535c926fcbfac6a0db31e6706f6ca8c9","sha256":"11704e45a48552b3c0b2401e267c18d07102c0519b68178b4a4560ef631fde1c","sha512":"95502cfd7842634e46346f85c7355dfddaeec1781591dfd4d3db8fd11dc63682f297e550ae952353dd5aa181d547b24165cbf023ddb4038a79d86c1be62c9681","ssdeep":"","tlshash":"2ee02076e352410399e1e0258d70658c603000db6c49f6bad0597451710defb747bdba","size":341,"data":"","first_seen":"2025-03-05T21:23:04.354995Z","last_seen":"2026-06-06T04:44:48.462876Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kraken50at.com/login?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=KRAKEN\u0026landing_url=kraken39at.com%2F\u0026name=_XrYQpTLT9DSVktyS\u0026host=https%3A%2F%2Fcaptcha.kraken50at.com%2Flogin","fqdn":"captcha.kraken50at.com","domain":"kraken50at.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c2de377e01c28ce4c7af2c6e2efe9ae","sha1":"fa50f55376b8ebaa86b0f5b32311d790b75ee519","sha256":"a1a2bfda1262a5e09dea750d00cd9a51c3ce2823129380be6ddcfb33b4ca8e6b","sha512":"1def4927f59cf3a3ea328209f7cc130da16b88862908f56117d31cf41bcc31f90ba5189a6ebeb8c3118d715d9d18def501d96d85a2b3cc782aef9c7fafb82f90","ssdeep":"","tlshash":"9b71617b7469bdb2034294e0802b5226f93a58a8f05e90b4f379a4d52cf880e4175fb6","size":3530,"data":"","first_seen":"2025-06-19T06:29:20.118395Z","last_seen":"2025-06-19T06:29:20.118395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dac98dd87f5f9c4233c05d3f0906059","sha1":"2b6c5a2bfe7fb2911cbecbcdeba0ac2b8f436cd1","sha256":"f6409afe48fdf2c34f342f7fa69a2a843ae9d2bbfb8def2c892c8942d56cd754","sha512":"f303124b62ec0a2ad1adec7be6394c96ffbe653c52e570b031b8e1c187ce3166e1b8ff6b8a9a275638cab6105a4fe0cbc2e9d7350ef87f93411338b011ae3eaa","ssdeep":"","tlshash":"1241d0a91827066015e7613abbefb665b37521334814d501bb4e50d0ffa052a6774be8","size":2222,"data":"","first_seen":"2025-05-14T17:51:50.011392Z","last_seen":"2025-07-04T01:00:50.820695Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken38-at.com/","fqdn":"kraken38-at.com","domain":"kraken38-at.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"273a567817a222ea36919fed78ed00ab","sha1":"f06cf879535c926fcbfac6a0db31e6706f6ca8c9","sha256":"11704e45a48552b3c0b2401e267c18d07102c0519b68178b4a4560ef631fde1c","sha512":"95502cfd7842634e46346f85c7355dfddaeec1781591dfd4d3db8fd11dc63682f297e550ae952353dd5aa181d547b24165cbf023ddb4038a79d86c1be62c9681","ssdeep":"","tlshash":"2ee02076e352410399e1e0258d70658c603000db6c49f6bad0597451710defb747bdba","size":341,"data":"","first_seen":"2025-03-05T21:23:04.354995Z","last_seen":"2026-06-06T04:44:48.462876Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"0570aaf515b949e4409b572e8b25564a","sha1":"a422d5f5cb2cbc6aca408195f6aaf89ecdc2aef1","sha256":"cb837b30944fbeb3b0a22216b1fd678f1948e5711dc49dadbbfe17ac7cf5d9e8","sha512":"4b1e2a3b13f30570ab702d673c2ab43a70262d3f310730356b386311c83601d515ad4ff16a5f1af8d66241ce7d73e26a845bd099670ad8148893b7bc333a02f2","ssdeep":"","tlshash":"a16000c300f000030c0030000cc033000c0c000000000f000cc00c3c00000300c00000","size":12,"data":"","first_seen":"2023-03-07T12:12:25Z","last_seen":"2026-06-03T21:43:59.176805Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b301f793f14135935bcbb303f308021a","sha1":"185ba94b5e6e89e6959a532730e25dcdea51df35","sha256":"683e549872cca0a2ef5a9f58c8bffde30908d999c6d0db7e084a6938dd5aa8ec","sha512":"8f5c7ee30316543f98ea6ed6cfb10cd688a044fe5f89363c5d554c5da95c087cad2e5d0ea78c3eadf19e95b7472cabdcfd2c1ebc89110624d2f4509d3cdd62e6","ssdeep":"","tlshash":"fe90045304041c04d33040333c15f304177075d1433c74407044114704f0fc3c053334","size":40,"data":"","first_seen":"2023-03-07T12:12:25Z","last_seen":"2026-01-18T12:17:15.5705Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c82a0d9fef7829416e5b4be6cb55573d","sha1":"72aa62ba224097b697bb70c88277112b6cd63adc","sha256":"a24d9ca17e715ff3576846aafcedeb30add828d705eeb97f7b6fae37de22944b","sha512":"0f5ac5a00befe75eca16b92f16f019129327a66051e133a135c449f7e4c3c74e30d4a551bb433dce2bb1fef40d2dfbf3c12d6772bdd8c30db4654fb12ebb0c22","ssdeep":"","tlshash":"bca022a30a00802f023332e0e80af0038002a80bcf2800b0f0e000ec08f8f03cac32b2","size":75,"data":"","first_seen":"2025-06-10T09:51:56.973432Z","last_seen":"2025-06-30T23:08:34.447916Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"965e534be3f0a47d82d6ca3111ba2957","sha1":"9a683a109076ac83939a1a54777cc38f4d2a4061","sha256":"ab2049f6ee775a4cee93a8c3ab05dc2d490e1689bd7c3f752fda8eed6d9e5893","sha512":"df0217fb1c75800f3eb7233d0c248c41351583999bcbb2cafd64745253f24a2735b3a969ab64ad11707102ad51221b8b82aba0601510762bf059f3a208b1323d","ssdeep":"","tlshash":"a16000fcf00000000c003cc00cc00303003003cc3000cc0033c00030cc0030c0c00000","size":14,"data":"","first_seen":"2023-03-07T12:12:25Z","last_seen":"2026-01-18T12:17:15.567589Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"kraken39at.com/?tck=1","fqdn":"kraken39at.com","domain":"kraken39at.com","tld":"com"},"ip":{"addr":"104.21.32.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-19T06:28:55.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kraken39at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 22:38:22 GMT","end":"Sat, 30 Aug 2025 23:36:57 GMT"},"fingerprint":{"sha1":"04:82:4A:5D:49:C9:7D:28:4F:92:40:A2:25:75:9A:42:12:4F:70:36","sha256":"78:36:B2:4C:E2:E9:90:88:DB:88:15:E6:06:FD:B6:9F:8A:60:70:04:8A:1D:13:17:55:A1:CC:2A:2F:31:77:B9"}}},"request":{"raw":"GET /?tck=1 HTTP/1.1\r\nHost: kraken39at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 19 Jun 2025 06:28:56 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: /\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2BTYAVcW2Njlh7XGuggEf2vmMkMSDPyUeQtildIRQTy%2Bl3tXrJP1Q7PziNjlMmLWGPgs8s2D1SHJEmPw7kOPSKMYt%2FJrnHwvyQ4tLQ%3D%3D\"}]}\r\nset-cookie: scheck=1; HttpOnly; Secure; Path=/\r\ncf-ray: 9520f818d9d55687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":10393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":37,"dns":12,"connect":1,"send":0,"wait":646,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken39at.com/","fqdn":"kraken39at.com","domain":"kraken39at.com","tld":"com"},"ip":{"addr":"104.21.32.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-19T06:28:56.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kraken39at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 22:38:22 GMT","end":"Sat, 30 Aug 2025 23:36:57 GMT"},"fingerprint":{"sha1":"04:82:4A:5D:49:C9:7D:28:4F:92:40:A2:25:75:9A:42:12:4F:70:36","sha256":"78:36:B2:4C:E2:E9:90:88:DB:88:15:E6:06:FD:B6:9F:8A:60:70:04:8A:1D:13:17:55:A1:CC:2A:2F:31:77:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken39at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: scheck=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:56 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GX5%2F00b2swtMCRaoZTR%2FWIHldGToULQSXUH0LBRc0dzYSiVnP%2Bv6ClSN2hKjvpjQFgv6Uy0ftiq6D3TeTx3yeg1BsrgCTSkikTEKkA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: ses=j4CPVyWb4dn3saUbJH; HttpOnly; Secure; Path=/\r\ncf-ray: 9520f81cee715687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3227)","md5":"3fd4383b443d5a94c7a25e3ca8474ce3","sha1":"5289e8a6ad80a7e8dd00cc80666a3651263ba2d6","sha256":"7be01811e99b839498818ab0eff806188661fab901761c77e14ef11be09e4e52","sha512":"36e32ebb6e32ce61364e15a03ce4c416e6f2260f621e40cd5f1185495e8fcd6abedbd3f65d7bb425c46fbb7ff89a606d05c2236580ba76af66b1a8a83d1491eb","ssdeep":"192:A7TikiDeYDi85YE90gUVy4RqOEVjMa2USZI9BpQuuFpjy:APriDeWi85Ye0py4Rcdt2USZLFc","tlshash":"fd22c912c54716f153019474afdc7a871fdc823ba566e4647bcca69dafca2b088e23cd","first_seen":"2025-06-10T09:51:56.949683Z","last_seen":"2025-06-27T09:15:06.710217Z","times_seen":10,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kraken50at.com/login?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=KRAKEN\u0026landing_url=kraken39at.com%2F\u0026name=_XrYQpTLT9DSVktyS\u0026host=https%3A%2F%2Fcaptcha.kraken50at.com%2Flogin","fqdn":"captcha.kraken50at.com","domain":"kraken50at.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken39at.com/","date":"2025-06-19T06:28:56.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kraken50at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 02:06:46 GMT","end":"Tue, 02 Sep 2025 03:05:35 GMT"},"fingerprint":{"sha1":"C9:18:C3:55:8F:85:F6:FE:D9:98:AD:8D:64:C2:8E:F5:B3:44:48:06","sha256":"16:A4:54:26:06:EC:19:90:70:84:E5:24:CB:4E:1A:4D:00:A5:F3:D0:A3:7A:00:BB:1E:E9:3C:A3:9E:56:52:9A"}}},"request":{"raw":"GET /login?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=KRAKEN\u0026landing_url=kraken39at.com%2F\u0026name=_XrYQpTLT9DSVktyS\u0026host=https%3A%2F%2Fcaptcha.kraken50at.com%2Flogin HTTP/1.1\r\nHost: captcha.kraken50at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken39at.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1423\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\nexpires: Thu, 19 Jun 2025 06:28:56 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkdXNthoobjL%2FZ8dL2Ws%2Bhu0dRZ1xa908KxFSVSRdHdDSNklwo2lIdnIfEMEQ4kUHhx82lXwmwHZG7Cvtgri61sgHznnRXq2ExJqJhFmSWbYaifo\"}]}\r\ncf-ray: 9520f81faa8456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3530,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3530), with no line terminators","md5":"2c2de377e01c28ce4c7af2c6e2efe9ae","sha1":"fa50f55376b8ebaa86b0f5b32311d790b75ee519","sha256":"a1a2bfda1262a5e09dea750d00cd9a51c3ce2823129380be6ddcfb33b4ca8e6b","sha512":"1def4927f59cf3a3ea328209f7cc130da16b88862908f56117d31cf41bcc31f90ba5189a6ebeb8c3118d715d9d18def501d96d85a2b3cc782aef9c7fafb82f90","ssdeep":"","tlshash":"9b71617b7469bdb2034294e0802b5226f93a58a8f05e90b4f379a4d52cf880e4175fb6","first_seen":"2025-06-19T06:29:20.118395Z","last_seen":"2025-06-19T06:29:20.118395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":35,"dns":4,"connect":1,"send":0,"wait":90,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken39at.com/favicon.ico","fqdn":"kraken39at.com","domain":"kraken39at.com","tld":"com"},"ip":{"addr":"104.21.32.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken39at.com/","date":"2025-06-19T06:28:57.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken39at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 22:38:22 GMT","end":"Sat, 30 Aug 2025 23:36:57 GMT"},"fingerprint":{"sha1":"04:82:4A:5D:49:C9:7D:28:4F:92:40:A2:25:75:9A:42:12:4F:70:36","sha256":"78:36:B2:4C:E2:E9:90:88:DB:88:15:E6:06:FD:B6:9F:8A:60:70:04:8A:1D:13:17:55:A1:CC:2A:2F:31:77:B9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kraken39at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken39at.com/\r\nCookie: scheck=1; ses=j4CPVyWb4dn3saUbJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:57 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ONruj%2FHtsakWJTpngH0AY7GgjHO5kn4PhLX9V1aplWAoIdPnHUCwXzUor5a0eOYFYA8r367Nz3rFeyUHtjxfhmM2TaT0IaGgprNliPP4XNQHHeZODT%2BIajZyR4JMUfvcag%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 11 Mar 2025 21:15:16 GMT\r\netag: W/\"67d0a7e4-256\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9520f820e9ce56b4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2704\u0026min_rtt=553\u0026rtt_var=1749\u0026sent=68\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=6761\u0026recv_bytes=5857\u0026delivery_rate=660512\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=15498\u0026unsent_bytes=0\u0026cid=2f5cd7cce5f34e35\u0026ts=852\u0026inflight_dur=30\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":598,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"88dce50c34a848e75b6c7d916711e6b9","sha1":"0355f55c57c14900477cc886f3345b1e898fe28e","sha256":"4f0b7e5217318eedc1b42ca1ce5e128c649c97082912f1d800eec1325207ad96","sha512":"f6e0828ce51c9e2cb462b4884f01a5fb7083e4f26eeea1b596c5d04144b9226efb62347199546ce81e0473d97231cb1f6468ccc94e620cf83ffd9035fb63eed5","ssdeep":"","tlshash":"faf00ce3e838f489c98e2ca222911201da7585a723800819b6fac008ac20b885933f92","first_seen":"2023-05-10T12:46:36Z","last_seen":"2026-08-11T13:05:36.508354Z","times_seen":3807,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken38-at.com/","fqdn":"kraken38-at.com","domain":"kraken38-at.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-19T06:28:54.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken38-at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 22:31:18 GMT","end":"Mon, 01 Sep 2025 23:29:45 GMT"},"fingerprint":{"sha1":"00:DB:A7:C3:5D:EA:58:33:70:2C:89:6E:F2:2A:2F:32:D2:19:1E:E1","sha256":"53:CC:E1:C7:B3:A4:67:21:E7:33:C9:00:16:83:50:DF:79:58:9D:E9:2A:E4:43:6F:36:94:CB:7D:01:58:20:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken38-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:55 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SvYgT9g7myojMizbrMCUPkaNT%2FgVvSCQ5iKKmcsjqVV9UIHkAbgI4BsLCUHNg3tB3CdHt03Lf73SvVL%2F8p8WiaFGl%2BJEV0QZMwPpGU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: scheck=1; HttpOnly; Secure; Path=/\r\ncf-ray: 9520f810fbee0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10397,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3229)","md5":"74230b31cedcdab266ea3b624bae63c1","sha1":"058b4fea99584465d7d4442941a39380f042e2ac","sha256":"787e000f30f8ff6c4af51ce1d3abf820eb97fb3260f3dc62a6b8a3ea00ac92d0","sha512":"efd0a2f9d095a1d8c2e0bc2d872aa17edb7d24ea43ad91f9cf5f8bd429f8f66e1d62f95ada9476ca0bf82319b67d83e59eb1ecbf3fcf7973ddc293ee5d5bb49e","ssdeep":"192:A7TikiDeYDI25YE90gUVy4RqOEVbMa2USVlmpQuuFpjy:APriDeWI25Ye0py4RcJt2USVllFc","tlshash":"cc22c712c44716f152019064bfdc3a472fdc822ba566e0247bdc669eafca2b088e638d","first_seen":"2025-06-19T06:29:20.12088Z","last_seen":"2025-06-19T06:29:20.12088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":625,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.kraken50at.com/login?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=KRAKEN\u0026landing_url=kraken38-at.com%2F\u0026name=_XrYQpTLT9DSVktyS\u0026host=https%3A%2F%2Fcaptcha.kraken50at.com%2Flogin","fqdn":"captcha.kraken50at.com","domain":"kraken50at.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken38-at.com/","date":"2025-06-19T06:28:55.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kraken50at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Jun 2025 02:06:46 GMT","end":"Tue, 02 Sep 2025 03:05:35 GMT"},"fingerprint":{"sha1":"C9:18:C3:55:8F:85:F6:FE:D9:98:AD:8D:64:C2:8E:F5:B3:44:48:06","sha256":"16:A4:54:26:06:EC:19:90:70:84:E5:24:CB:4E:1A:4D:00:A5:F3:D0:A3:7A:00:BB:1E:E9:3C:A3:9E:56:52:9A"}}},"request":{"raw":"GET /login?return=js.client\u0026\u0026se_referrer=\u0026default_keyword=KRAKEN\u0026landing_url=kraken38-at.com%2F\u0026name=_XrYQpTLT9DSVktyS\u0026host=https%3A%2F%2Fcaptcha.kraken50at.com%2Flogin HTTP/1.1\r\nHost: captcha.kraken50at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken38-at.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1453\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\nexpires: Thu, 19 Jun 2025 06:28:55 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeD9EQwYGTadr59xtyfFXgFFrxfHZR7s%2FKc7h%2FOqjNQ6%2BKEoIACKvM1cDDa9EZvn1KoCuNQVlUfeiyGgWjKIasiYVKtq%2BIp%2FbBS%2BHcbnye%2BYdD8w\"}]}\r\ncf-ray: 9520f817293256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3574,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3574), with no line terminators","md5":"e33c83a3cea974a24950523c39752953","sha1":"9292431c46be37b3df13ba0b72fec021f0f4cb44","sha256":"600fb2ac65863bfca71e44daca1ab9c041d4204bbba0348fae7fbf469bf2d52c","sha512":"bfc908e91330704c2df07d0343ca4076069f3135ba6bfb5d5abbf121bc42528c65e6d52c38a6c605e859f10b0eca93ce2bc4519af8fa938f1f98c0759c23da19","ssdeep":"","tlshash":"f871727b7469bdb2034294e0802b5226f93a48a8f15f90f4f379e4d52cf880e4179fb6","first_seen":"2025-06-19T06:29:20.122395Z","last_seen":"2025-06-19T06:29:20.122395Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":30,"dns":15,"connect":1,"send":0,"wait":130,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken38-at.com/captcha","fqdn":"kraken38-at.com","domain":"kraken38-at.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken38-at.com/","date":"2025-06-19T06:28:55.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken38-at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 22:31:18 GMT","end":"Mon, 01 Sep 2025 23:29:45 GMT"},"fingerprint":{"sha1":"00:DB:A7:C3:5D:EA:58:33:70:2C:89:6E:F2:2A:2F:32:D2:19:1E:E1","sha256":"53:CC:E1:C7:B3:A4:67:21:E7:33:C9:00:16:83:50:DF:79:58:9D:E9:2A:E4:43:6F:36:94:CB:7D:01:58:20:00"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: kraken38-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kraken38-at.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: scheck=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-zerkalo.org/captcha","fqdn":"kraken-zerkalo.org","domain":"kraken-zerkalo.org","tld":"org"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken38-at.com/","date":"2025-06-19T06:28:55.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kraken-zerkalo.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 May 2025 00:20:55 GMT","end":"Mon, 11 Aug 2025 01:19:32 GMT"},"fingerprint":{"sha1":"49:09:CE:23:69:D3:EE:98:D6:47:B5:F3:17:EB:20:E2:6F:F5:7B:BD","sha256":"C3:98:2D:AA:49:4E:73:90:06:E1:56:3E:F7:AE:F0:A0:4C:3A:AD:CD:34:0F:7B:F0:6F:33:C5:37:FC:44:B1:7A"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: kraken-zerkalo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken38-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Thu, 19 Jun 2025 06:28:55 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQH5sZiLyhu2AY5Ws9elCGxslgfJ1q8xCaYuvqcpSH1t%2BDXnJZz%2FCEfNmCEU%2BDU1S7iRypQ7%2F934J9iiVszyBztG2XUSzRHg6ZHOCXq3LKs%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9520f8173824b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":49,"dns":41,"connect":1,"send":0,"wait":86,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken39at.com/captcha","fqdn":"kraken39at.com","domain":"kraken39at.com","tld":"com"},"ip":{"addr":"104.21.32.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken39at.com/","date":"2025-06-19T06:28:56.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken39at.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 22:38:22 GMT","end":"Sat, 30 Aug 2025 23:36:57 GMT"},"fingerprint":{"sha1":"04:82:4A:5D:49:C9:7D:28:4F:92:40:A2:25:75:9A:42:12:4F:70:36","sha256":"78:36:B2:4C:E2:E9:90:88:DB:88:15:E6:06:FD:B6:9F:8A:60:70:04:8A:1D:13:17:55:A1:CC:2A:2F:31:77:B9"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: kraken39at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kraken39at.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: scheck=1; ses=j4CPVyWb4dn3saUbJH\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:57 GMT\r\ncontent-type: text/plain\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PHyN0fLiUiMylnbKGlbWotUF9FUivEwAZ7i6ScvOdT7h%2F7D85rYnaTMZCNTKbFRolT30%2BloiMm3JBqewf9t2YouGhmXZZGqc52yF3cvNk01zbKeYzeDIJlEfz%2BShZ0vSdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: no-cache\r\nset-cookie: cookref=https%3A%2F%2Fkraken39at.com%2F;Path=/;HttpOnly;Secure\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9520f81f79be56b4-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2525\u0026min_rtt=553\u0026rtt_var=1670\u0026sent=70\u0026recv=94\u0026lost=0\u0026retrans=0\u0026sent_bytes=8065\u0026recv_bytes=5901\u0026delivery_rate=734912\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=16802\u0026unsent_bytes=0\u0026cid=2f5cd7cce5f34e35\u0026ts=1236\u0026inflight_dur=32\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16048,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (16048), with no line terminators","md5":"316f4742aedc1514a7610ef1040b4618","sha1":"5b4018da10242d4b10e1b795e5bbe113c5b72569","sha256":"b69143fb73f00613dc873e398d29f4d69f85cce7882d59d9de6bdefefb6a3b52","sha512":"8fece48855d804d79eaeb7f8c13ba39bdd476afd55dd27ca344eb8a7eb3880d3086ff7b4240b5962eda522295d7098bbb378d5725b339d533b065597757fc63e","ssdeep":"384:fnZjz8NPNDzTfF9zfbZEJ//Q1HGB9yNIqfjaZ81:18bFFjZGXQZMyWm1","tlshash":"a872cf65713ada23cdbc7902eaaa68d01cdfc53de2163ba67127bdd105c6c0d051f299","first_seen":"2025-06-19T06:29:20.123814Z","last_seen":"2025-06-19T06:29:20.123814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":826,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"kraken39at.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-zerkalo.org/captcha","fqdn":"kraken-zerkalo.org","domain":"kraken-zerkalo.org","tld":"org"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://kraken39at.com/","date":"2025-06-19T06:28:56.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kraken-zerkalo.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 May 2025 00:20:55 GMT","end":"Mon, 11 Aug 2025 01:19:32 GMT"},"fingerprint":{"sha1":"49:09:CE:23:69:D3:EE:98:D6:47:B5:F3:17:EB:20:E2:6F:F5:7B:BD","sha256":"C3:98:2D:AA:49:4E:73:90:06:E1:56:3E:F7:AE:F0:A0:4C:3A:AD:CD:34:0F:7B:F0:6F:33:C5:37:FC:44:B1:7A"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: kraken-zerkalo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken39at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 06:28:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Thu, 19 Jun 2025 06:28:56 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZjw75r30%2BwUPS1EFHdQ86RSN%2Fxfx77vNjOs7oggjWMvw%2FRh9e2JkYJcAa4jKy6lAqnampNpk9p%2B9Wyf2SBzqScv%2B3ss25rT6RIn%2BslJhYk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9520f81f898b5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":86,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}