{"report_id":"f8667ef6-bf8a-41e7-8572-a9aec19c0d38","version":6,"status":"done","tags":[],"date":"2026-02-14T05:51:29Z","url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"172.67.157.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"title":"Kraken маркетплейс — актуальные зеркала и вход на площадку","dom":{"size":42241,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10269)","md5":"7f16a9d298a320b93b796362be35c6ed","sha1":"a3fe1e40cbdfb7a45d34289dbc7390d8ef6ac00d","sha256":"0cfab3faf4450baca5d2d1aaa5056707c903a2bd89d8e01bc0f6df7fa1173dfa","sha512":"f7f0395d5a9b5355b108d21d1a36463f7e6f2ec7b951de4d632e0a86b06cf4d835fcfc35ecc07785fa6334ff771d8f771fb6405d491694220404af1045840990","ssdeep":"768:PFhWoQC67eTgM4ZkOKXT7eBrcojNRkcmX:PPWoQugJZkOKXT7cA/cmX","tlshash":"b113d96546aa126f11109036ed217f0c385b00bfef1b9b547a785aaa7fe78e1cd3d21c","dom_hash":"domhash91db03715880c3cead5a1a909b0ab7a7","first_seen":"2026-02-14T05:51:33.016944Z","last_seen":"2026-02-14T05:51:33.016944Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"172.67.157.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:51:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"kraken-vhod-onion.xyz","ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-25","domain_rank":0,"first_seen":"2026-02-14T05:51:30.129895Z","last_seen":"2026-02-14T05:51:30.129895Z","alert_count":50,"request_count":50,"received_data":3014555,"sent_data":22933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a8710909f9a1fa0e672eec58c541eab","sha1":"3365800897a7b2d5fb0670a36bac81ea458e4ac3","sha256":"881801eaedcb8bfbe8fc4a50da92c633afcdd6a85e921c6f906e0aacf9898990","sha512":"3b2712a474a12ccc29415ccc38cf827faa7665724a669f6b3daca7fb6e8baa9c1f37523c1e8f1376a2592738a22a1bfb65ba2e83a24ba301071039b43864b5bf","ssdeep":"192:Xj6LNxQ221RC8kyHHC1+oj6jeEirSQRBpknjwep1oHpYNnh2fu+fVJt7H:Wwh3HicojaIrXRvmwep1oHpYNnh2fu+V","tlshash":"0af1c7982a76173b40bb81b735936324a43911273a06fc6cbf1dd9411f86cd666ff3a8","size":7987,"data":"","first_seen":"2026-02-14T05:51:33.052556Z","last_seen":"2026-02-14T05:51:33.052556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80f998d7b3876b175270fb2698725cf9","sha1":"4497a5b4bc88f9f1cc80dc10e4c45cf727921765","sha256":"ec9e70c0711b88e60b1d3f5dff3121e62c6f0dc89ea3d2f65fa39aa7622183a3","sha512":"f60641ff761d6db70cd91834853bfee7a26e7ace549163a7ac0df4f0574a5cbff5b79ef2dc6d2f265eeac30db32cfc03fc63c8ca4e8383a535dc382f27e9d6a3","ssdeep":"","tlshash":"e6800444144547151144453101700fd1313f10cc1540513c4d1004504d054f01014054","size":36,"data":"","first_seen":"2023-12-28T12:48:42Z","last_seen":"2026-06-22T07:31:26.135884Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_37.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_37.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFc%2BFu4sZhM%2FsmO%2FsCmyZqPcCJ45d%2FXy2IzX2DTr%2BVD%2FJMoAiASJnnJld7dwztR%2F53sEC540q10bzgx7nvFIoqcBsRSUVk5myDVE4LSe3bUKgjy5Sg%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_11.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_11.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88382\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-1593e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PdU%2BzPsEmf%2FJszxR7D1lTsBHTEwfvCChNoy%2Fpu3XMUj6O48IMgX3BQdbBQOiHCjNqjIqpIXaHP3261JMdhf%2BRlVCAbrTJBoTdijYjYbZOXIaULHfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67fff23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"426cbcb35ae5938343a720e4ee38de34","sha1":"a0e18d3c4d668398ffdd081f51b34f1b038e0c98","sha256":"37306b4b3a8ad99dd894c6d99e822ed9e38baeecd62a6520523f90b02c42b7ae","sha512":"b61914a9a251f4600fbd7b330f3cec0c2e4d624d05daf91c9518e3238646ab5b0616539a29385bff7edf5d581f5e3135e53b99f3156743c767df87252c23733f","ssdeep":"1536:FRcscVQBpG8VLAPfbOLaChPuWgUllaedkmHmTSqFufIGRhL2N:FRFcWP2naLPpHt6mHmdqI2Lk","tlshash":"1a83127a5fab43825f5fb124f81bc88bc4fca4da0139594061bfcf161ba76829a3c471","first_seen":"2026-01-26T14:45:09.143589Z","last_seen":"2026-04-25T08:12:17.976323Z","times_seen":6,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_13.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_13.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71898\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-118da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUGJmBc3ZsqqoW8%2Fr5%2F9FmTc%2BCGY%2FZ%2B9Xrl667j%2BVUMn4fNo8Tx5hPRmb3bTV8VhgK0xZNkaORMjklFXZ2o00HJaVUnJw54OtenVrhYUYDn7DIMZpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6780123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71898,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e462df07e186e8c5e292e043f2c1ba08","sha1":"d95bb44747b0af96839ef640bc7e796a55acbcf1","sha256":"d002a9aaaf017faed652f34d5fa48435115d40ab03805c26b9bb39f5547a5922","sha512":"542d9c5ca837f6337f1db82bf206f7ffb280ecb418548420645701a56dced1f2913409bd3df32097d62d04c7f838f15812a419e1ed7762ed6cf05b041e1fc833","ssdeep":"1536:FfZZ4swBpmxIO+F2Hi877rPjKFMj0UnfIQcbwpHl/f4w0qiz9sf7S3r:FfZKTHm1+IC0Peq0IfIJb2VV+7","tlshash":"42631200becb60ad51f3c9c7fc21a5a791972aa80f4187adc90b79c98a30363757de74","first_seen":"2026-01-26T14:45:09.199498Z","last_seen":"2026-06-23T19:33:09.603579Z","times_seen":9,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_24.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_24.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 120360\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-1d628\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2fcGRfXjmuZxqDyMdjADAQ8S3hyIoEkxmsHD40KdwB2JRaUPcS3rGqfqs0H8mQmIyAuz6ohDqAJYlwKeSIOLaS4Cqslx0bfcG8J53KBvZ%2BcW7aVGLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f16b4d0fcfdd413a0c7d966e6c7bb51","sha1":"71129d671b5109e01d99ff1b184a0f54eb2c6b17","sha256":"781f158c6cfa7bb425ab819c70444a4da97025f8e8f358afaa8487695e0bab08","sha512":"5e967bcd008d91978c88cab022a5841748f92fcb14d1390e8fb670cc6d2cbf0d3f5c7c8dca0b82d7a9ead9f4b7ee176bc47efcd9e87305d2356ecb154b666f8c","ssdeep":"3072:F2dWm+S22vADreDeUvBjV49vodWEY/sPb358ZpoLm:kWhS26A3ehvp29vEWEYEPb358ZSLm","tlshash":"bbc313602e031205f89d10bf68cf4c2fb63a3ba1b1761ba8f9157e1d865d344ab661de","first_seen":"2026-01-26T14:45:09.180041Z","last_seen":"2026-04-25T08:12:17.984639Z","times_seen":6,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_32.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_32.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDoV8f%2BH9IkeCiZ7yc17nXmBgvXTc0DossC5inDEdvfBxYl3Vn07qbK32Fed3Aext%2FRJ3KnPK7o0KI0AeHnRGAMEf6gAZ5drnNziZc2IMCRCdPYRSA%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_39.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_39.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MN7tKZVlpo50iB0pB0FEaRoK4qGWB8zRwC8SO3VBy%2FDd%2BkWZBTEONvRUAswzOOIY4KwqgnRn1x6k1zys75I9NFFalY%2FUkgLFqVFCjd%2ByBKMexRx2OQ%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniiino_3.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniiino_3.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31134\r\nlast-modified: Wed, 04 Feb 2026 18:27:56 GMT\r\netag: \"69838fac-799e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q926fSgZqIrqbWDDhePWbkMQ7co3jBsi6VM8X6UCYCD5hyrVqAQ9K76BojfGCdgvali1Cui548exMVOsmYQUcEfKD7JL4P2GJVlpOjiRgiXLiZeQUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6a81e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31134,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6e4734ba1a470133b309a5881bd68fc","sha1":"ea1abaf664b7d11cbed92f93a2e998f215803c87","sha256":"9ff634464c18a54980bffbda4f85e62f110b04b96f0af90432126be198328446","sha512":"f693f30188a95528faf52d9e6d5bb85a117e1b7873beab36335103ed0c795243acd0d2c11fec00ff2f0f4df120c1ed348e7a7f21e3d37137fc1c7c1c01656f78","ssdeep":"384:nwsQ7Gbf2d54+bTIbZsUBwTGzFakMN8/y/Tftpxpwk9ZAbrttQXRWguNtY9m/h1Q:wsQC2pwsSfdM7TfuttQhXORheXV2g","tlshash":"70e2f171cc2e2f8cdcbf67b824851f84d17e7944d098dd1b3285104ad7045eab6f8d9a","first_seen":"2026-01-26T14:45:09.20634Z","last_seen":"2026-04-25T08:12:17.9733Z","times_seen":6,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/logo.png","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:08.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/logo.png HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owZyaFJ94F7ZouXfWPyruRnSqvrinpgoqodRp271ZxLRxuYBIx0pXSjZ%2F3XAG5c2pRr0VkPVIgACOnU0ALwJNosLVgi%2FGw5SQ1sTAFgrA4dpvxX7ZQ%3D%3D\"}]}\r\ncf-ray: 9cda4abcd8c523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_8.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_8.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29430\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-72f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUR1rRSvAyn0ArHgwZrbyxq3ojJP9PqekO%2F6DUNlS3k6kJRanj%2BJzT73EX4L20kq%2BsK%2B6LAQLstTB0lhGObCny2XDoIc8nyos5%2F200y7HzJBDdkAFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ffb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x401, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3e58b1154da72ecf2cf4bfd19ed5e32","sha1":"33e1c64323c77986374e11b96373662b3f45dfee","sha256":"a338e268b52b7608358facc05a7d3015a9d13ee2f0a3359c7ae5ca50ef9b5d2c","sha512":"ea50ff39f4a310264f9afb8cddc803f8684301576135e6b4e2f80f204f813562685fafd190d0f0dc38a70546065cb7af2371ec73c87fa98e3dc225bc94c04349","ssdeep":"768:N92YPLyQbLOC05RakCoin9zH/xGh3fNMP:HdPJbSC0Ooi9zH/xD","tlshash":"03d2f1390d4cbf02ad45cb25f78fb9b5ea65bf10302931750e1ba1862bdcd9160c6bd6","first_seen":"2026-01-26T14:45:09.193818Z","last_seen":"2026-06-23T19:33:09.618755Z","times_seen":9,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_9.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_9.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64364\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-fb6c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yso4rX6C1N07hsEsaKNC3gRIs%2F2FVRq0MJRHBHgjVDkaZ5Zg9nZUcmMP6CNr7U0h9uDhHCidWydtqqyh8L8wQEe2Eh%2Fpl95HguqWUSiavt3fUQkuTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ffd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64364,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d10c4bf406981b396648df4e0ee8a0d","sha1":"3b3296b09d6ff0597a25b3cccd9ff1d327f1e760","sha256":"c5adc7eed1f0f56894de3aee2058423f3cfc14ef01a6b0998fd3b8a5851e8c46","sha512":"4b14fee5a6bc8aff6e3ca34874f995c00d06a20b61c371a6246fd21141e9dffe74265e160cd43a76363d0fb860410bac5e9a2ee1fdcdc7e0a51bcc12c770c19f","ssdeep":"1536:89Y0+Bjt5gbRoZaiI3LmRmCds09QA50aTPByDNysUHR:89YPj41ogVLu9uA5ZTK+","tlshash":"c25302e949b8c4ea1c8353521321e8687e12aaa3d9b8bf67405b0355c14ff3472ee76d","first_seen":"2026-01-26T14:45:09.195898Z","last_seen":"2026-04-25T08:12:17.975699Z","times_seen":7,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_20.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_20.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75632\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-12770\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkBUYDYwv%2FCInI%2Bp0GzV9rEdDboPC%2FgdZICVKMgZDC8bHdXRJ0kkRSuIehaJAwbszoMBx61tzRYgJfbd6QLpdIVM4PR4P0lVsfNUIzjlArzsXcuAww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 498x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5170c861ef8a3246ab0dc6aa72da3ccf","sha1":"539cfd0c31f229604cbb12087cc8e50e540985e0","sha256":"5f53a5284378fd21de0cd665dde211b954966a18a78931ed3175414066678a62","sha512":"5bebce3403d684da31aa7c80f8d31b918799eae3402d3214d03f127fd22687df9a60af6230a9be01c5acad81c46a989a237d1439a8a98d65d1eb0854abc90309","ssdeep":"1536:Flob00LdLB0NIS75VmOgiXSrmnebuOZZKCUB0eZKnR:Feb0OG+SbmTi2COZZ3UBvyR","tlshash":"d5730256b2f02521d326d83dd9461480fed6e3c93aca13d7b20f07ea4b2e5a5d12b366","first_seen":"2026-01-26T14:45:09.147783Z","last_seen":"2026-06-25T00:45:12.029957Z","times_seen":12,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/3.jpg","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/3.jpg HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19560\r\nlast-modified: Wed, 04 Feb 2026 18:27:56 GMT\r\netag: \"69838fac-4c68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Xlsx26kd3m58jG7R7sSTMicU4T8%2Fh2KgT453A3zXNCkIk3n5tb1FGDvebF7tHxIKoUMjn8oJI5Qn0n5SCEEHGPHcB1TeO197lpXoxw6bNS%2BMLLzYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab4cfcd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 398x476, components 3","md5":"681b0b361d13fd9957de44ee78fb8544","sha1":"7cbffaf0476e86d3f2d9ea43b4da83928eaf4ccb","sha256":"7bbf93ac2d7833a4cd97f331264f33bb8c2941b3dd9ec1838d558b2c322d79cf","sha512":"658a40a0e632879365fb81a823caf954bdb0732699123e79396db0e0fcd24ff8c3be59db65748aba8c061d952aad2a622639b45e52d3c855e8e165335d35bd46","ssdeep":"384:54HyuetoxPXl576JFgOi9P0WzIYQe+SOGOP2JS72VJnTvwv0:54Hdg+N57GF3u+wpdJJVJnTov0","tlshash":"ff92e0a3fefa53c1c601c4fc2a974285228e9e3be2989c0ca0e351f1705f9c525a50d1","first_seen":"2026-02-14T05:51:33.026841Z","last_seen":"2026-02-14T05:51:33.026841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_12.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_12.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65238\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-fed6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnQ7EuoAhRB7dqMW4KXBAeTq9k7hUId7jVrbZi8PEYfO3KNzruPA5zcDE3AMJ0i5EViLkdBr5hGnGWeCO0MqGaxRwZFf3JO4cprdO4jnGX0HBkcNkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6780023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65238,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4ac098f394aa2dfe8ecbde68f1e33154","sha1":"22af28ef154255d9c3b13f46ffc0a5e81631e51f","sha256":"d71c241d92e8bebda1387386526c5d4a220637f9ce63a14dcf1d2730d8b75863","sha512":"01e1fa37088d9f233c9aa24c7e8650e3fbd12a4492793362cb13a5a96c87dc67544119792fbec5c9df9a280cedc45f6e8b28b048e90ae514ec836388c4f6885f","ssdeep":"1536:grjnboDBshdA48jBFsDso0Cs2inURzFg936Olo2l9J3Fm:grz+shpKFCKXU49365uBm","tlshash":"4a53025dfa11ac9411b5070b0bd13fe095a0827f777739f05b87d18a9008afd9be612c","first_seen":"2026-01-26T14:45:09.224161Z","last_seen":"2026-04-25T08:12:17.979175Z","times_seen":6,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_17.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_17.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59008\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-e680\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTqh5d9Jqa9ig%2Fvpnzb%2BlzS148gsmHTUbJffBz3NZnehCQiE7AjTDcxPnrUraQWTdBZ3szZpd3qIAYw9YhxzIsDOKG9nxzGiHApRssxuqbG3Ovul%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x498, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"52d52f68c5a2524be636fbf39dd1d020","sha1":"d3636a2e2b3436e926a46cfe13bb2c380e47d5bd","sha256":"da163e0709cbb8e0fc988083f3e8079b3d0facc94aefb1f8f186ba468b9ad36c","sha512":"8e5f1523152186d1c2c19b90eea11921038b6687639fae19890e803fe243bef2f865aea08e28bc2adf5d32fd2f669c3f66561cd99c760b9d1492d0b67a93ecd9","ssdeep":"768:Cz/qFTrdaKEl1n1tccElg6KoQ7e+w5mp6zb9k9Sg35aJ8mAnVi7y35k4FdPEhDxT:eCFTAPwlHcw5mpOg35aCIy366Wdh","tlshash":"0643029203d52c3694f270292ac9ef03a988518db31c0f72edb5e1b01b5e40af6ed575","first_seen":"2026-01-26T14:45:09.228409Z","last_seen":"2026-06-23T19:33:09.610576Z","times_seen":9,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_18.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_18.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76416\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-12a80\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pNyY7jCKj85YqxzFmbQyNJFkg9Lv6pj4PqGUljCwCMwIrSJfT7EGfn58RoIUhi3%2BYUgRvJrDSruAGAcKw6nyIo9OWMKqraxdxBT09ftr4EwaG28qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 497x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4fe5c27808a72f9b1271eff602768319","sha1":"a7629dcb3a4063a6e6a8df7d5603da1d75eda2c0","sha256":"8f285ac19de0305ebe559bb3a22fd0f1af4894641907d25a63e8b4f314efd847","sha512":"2094cf0b1b03eef4a90c69656b78272c136393dfd2a130325ac366dc10c4aafb5422bb487bcf2d11c4e476a66c9e11cc23a6a26db35b437a0149ede73ff85c3b","ssdeep":"1536:lvrMo5+r/itw26uNWskUpyv0uqNOBoEGVp2/kHyxeHBEUG4ziv4Pn:lvrMiOEzfwseobSxsBEMz3","tlshash":"247302d8c95c3ecee53b6c3f463bfacd897a6e794709337c124554d3202aa1e21c11a2","first_seen":"2026-01-26T14:45:09.145659Z","last_seen":"2026-06-23T19:33:09.600425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_21.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_21.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76416\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-12a80\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c03ugno3H9wvpca7iCX34BosQahy7ualNfYBAOqJO4CU7V1fZ4cLeeBR700mzonemnFJfYntMVFbVPE9buYacYtQQV68oKutKLRZOIY2mywLSVsHbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 497x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4fe5c27808a72f9b1271eff602768319","sha1":"a7629dcb3a4063a6e6a8df7d5603da1d75eda2c0","sha256":"8f285ac19de0305ebe559bb3a22fd0f1af4894641907d25a63e8b4f314efd847","sha512":"2094cf0b1b03eef4a90c69656b78272c136393dfd2a130325ac366dc10c4aafb5422bb487bcf2d11c4e476a66c9e11cc23a6a26db35b437a0149ede73ff85c3b","ssdeep":"1536:lvrMo5+r/itw26uNWskUpyv0uqNOBoEGVp2/kHyxeHBEUG4ziv4Pn:lvrMiOEzfwseobSxsBEMz3","tlshash":"247302d8c95c3ecee53b6c3f463bfacd897a6e794709337c124554d3202aa1e21c11a2","first_seen":"2026-01-26T14:45:09.145659Z","last_seen":"2026-06-23T19:33:09.600425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_22.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_22.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65270\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-fef6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Je2JiI43fjAMAbeRN4lWaaVnd4RUEr4xMorKOuY0uYTEEmkOEYQrjcm6gDs8n%2BPIMKpuvrLBhqjy7lGi%2BxPa%2FzdyP0P7x%2Fuv8RXPaCDzboyboBaZyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65270,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4946d00275c930081f0d2279099c04bc","sha1":"05119acbfd1a0ce40a803042dbb0772bdf14fba7","sha256":"f047edaa1bc0288fc6972a001d6c28808fb28eb319e3b2b19ce3f813e2a45753","sha512":"20fa52e0ad394c474f42de8fc6d59c2449c29a0bcc349a3ae5049aaae1a60cbec8c6b0a01d237b201cb42746d9276d30a5d68e565942b40c9268c1688ef81709","ssdeep":"1536:eBhanQCC63uYr3s1p0E6zGbZVLtkxIZd3TSGDScslr7f:0Anf5rcL0fwrRkxIZNTDSFlvf","tlshash":"eb5302e87ec02797f2a7297474e4f586d8abe111750b7040680780dd86ea6c5cf3eadb","first_seen":"2026-01-26T14:45:09.172481Z","last_seen":"2026-04-25T08:12:17.964298Z","times_seen":6,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_31.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_31.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHfBKk6K1XRRAiO3ifjzIj4ssBihjam1jsft4IGxNNUJmyD1d%2Bf82hhOISxnBXaRKLeHryN806dZB9sp9AG62uTAUgGT%2BlZVRbRROTmZkVjnp6kauQ%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_35.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_35.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6lt8SBjYr3aFIn%2FSJqes3zzqI5Ok7Dsm6oRVWB5%2Fuuv44AeqAhjE9EAXABmB%2FqXzDJXR%2F4K45o%2F99zHsQLHecM9DrN0C0qp6DjsDIjO7dJgDVLryQ%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_4.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_4.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19232\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-4b20\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlwkV4yvppOzisEEdF2hSSSgLePDlALIsuYsq8Hlt5YbI0sD0yWXKB9SUJGPGdQlEM3LWBzhn64Wx%2BsEphkC2ANurYp9TJ%2BSRVyzJFlk2nlw7gQUyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ff723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x471, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"44c9426de2069d92c9b467236d2f77dd","sha1":"5254ca2918a8ef3398f0cb71a79932d4db08bee7","sha256":"65dde7b97c38b554ba30633a5a50ca8e6664665ac9c4c01b0bcba882bc9d6091","sha512":"93c5a6234b2a176cdcf15bd810cfd7fdabf758ec484f871704d5c5aacc1efaca1613f0df23b9164b07969e5af7f3c7d49bf353605e4c3fe482c4976bcea520d4","ssdeep":"384:+uy5wgU4x4Xb6KPeafzcwz1LYXDAY//7HrerDTEZhAu4JrmR8gE1B0+b8R:+Jwg1m7fF1LqZ/TLerHWIrmR8Zbb8R","tlshash":"6582d0086663c2c27f0f29d3b1915d73d7a427c81e5ca15d9c2d4834f9c273668fa9ac","first_seen":"2026-01-26T14:45:09.159417Z","last_seen":"2026-04-25T08:12:17.988371Z","times_seen":6,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_10.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_10.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 77398\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-12e56\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxMFntCPK%2FSo%2F8RcLo4Ca8gCPyNGEGO1pGS54EVYU9RdrePIeH%2BVpUo05P8KXTd8VcHdkSnExsMXrpGImJ4XzGTQqjiwmZC%2FFtLJ%2B6YKeXbauirvog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ffe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77398,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"516c27cf0116f42aea916637732ea625","sha1":"ab9a1933c3f135976137f3f5afda6c2957ae483f","sha256":"88465e03e4feeac66aa7faa2b8da5618dfeea3cd96150e81ece90493aedffc22","sha512":"2070395348c9f99877c435ed44a7adff37a752940afa68834f702a8970d3af89b23ac7b59078b45718df5128acda77c2c1342edc52dd9008cb7e11c67d63ae60","ssdeep":"1536:oE55PrlfDtZPbzIEmD4215z/8Y9JdZXFLtbCczfPWrHR:p5trdRZe5oY76ufObR","tlshash":"817312474402602164c2ac38a5c6b787dc7682bdb7e1e7d9fc8cd75375fa0ba5872354","first_seen":"2026-01-26T14:45:09.22112Z","last_seen":"2026-06-23T19:33:09.611135Z","times_seen":9,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_14.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_14.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62418\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-f3d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BdjIog%2FbUbbyTBr8%2FuRIULzGYzkWZ0asgSTGtHVIyMWX9m%2Fohhe6D808k0g5nfFwx%2FlagUR%2FPdRYnCeoBYtLnXKglRHG7OeDSZqdeDkLICisCDOjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6780223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"85bfbacb16d424e47fd05f01501e1798","sha1":"1d505864bf4c32af08b2b2fd2a1a4424c5cc17be","sha256":"e22e15654cde0a472c215204a7098fe7f4bd61d98c54b6e044d69fa90879519a","sha512":"c0ca18186a6eb42efb404db4e4a659444e07ce058cacf40e4758d15f59bbceb8b865cbfa43239f57d72ef70afa331352800e9f62dfe11715c173a0b55eca1571","ssdeep":"1536:UrFci49eWrNA49XNoS7nOK8ZYHfQ33Qn+tj0wkzNxCqlNN:gF8q4xNoGnOyfQn/khdlNN","tlshash":"7453028be915a188f22450c4abdf1ab6a2dfa9964fc1d5d5fccfb034c960c51d94e80f","first_seen":"2026-01-26T14:45:09.189129Z","last_seen":"2026-06-23T19:33:09.614989Z","times_seen":9,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_16.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_16.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28186\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-6e1a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=seinHTnep00fkITzicl9iZTRY1NQhiXry9KgYPzRvYsI8NR0NKYmvc%2FLyop80FaQAthuKIbEkTIOU%2B%2BVT%2B9NFL8RCGQsWxjP6onSGSuPq6u5OIld2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x401, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2f3099235c365657ec1ebd753002580","sha1":"fa011512023e52eff301de489000ec6cfe954816","sha256":"7fe53f98dbbda48e36e497198bf1156c55d1011aea268e7a0ae2e4c2850681d2","sha512":"ca9aacbd38c9eaaaeff020e40c74d00f4b1c30c55472172722f4a572562470dac08f900eaa8a4905fcbba2d1068a8fed84dd3fd9f80b27a0712df1e5aa4d7431","ssdeep":"768:TopBaRhR4sdCnfKgjT4CPt3e/ij4hzVvw:EaR3/CSIT4qP4Zhw","tlshash":"dcc2e193ea877fdbc1977ae45821d32491b87202973c2a737d8b95c8c700bf945226a7","first_seen":"2026-01-26T14:45:09.177793Z","last_seen":"2026-06-23T19:33:09.602972Z","times_seen":9,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_25.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_25.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 119470\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-1d2ae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NilU079%2FGpxmRc%2B2KhT%2Fh8GeQnVSm79L0BDVz%2Flq9Q%2BkdwKiaEV90yZ1ExCX%2FtyxUmSUb6TlnupMzyh4OZXdMLoTplDzxxyn3VaGSy75qUwr4wb3Cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119470,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b29052b6dffcf7935b886c09641bb4e","sha1":"dc39de2590b6f1b03895331b8780ae767e4d3d7e","sha256":"de0a45cba522e51bfe8ad2e4c74b56feba7b2744f5b49bf04c185eaa5bc16963","sha512":"f0837fbf615b83f941bfc56fda2faff48e9349634039d69516454be6d5dc2c36eecbff96b14f492573081550a762e8a50a0a889f46c50c0ae24ab9026af108ea","ssdeep":"3072:r/MOTj4rAG5OEe2JhxOMAD91jyZUNy3U/A5N:oOTj4k8D/hkMY+ZUNbON","tlshash":"5cc3126c17512f0de30872faeff4af761172ebb91d66c13b13544245ba94b29383ac29","first_seen":"2026-01-26T14:45:09.18217Z","last_seen":"2026-04-25T08:12:17.991821Z","times_seen":6,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_33.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_33.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSSj09SsH4UwIbDaQljBOR19ef4teSTfmx%2BDJw46irL66J5%2B4ogDvoW9p%2Fz6%2BYS08E8HwKnRPL84Y1EjOzLhj9vcefCXhU%2BVAxNw35ZnlWQQ2Pid%2Fg%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_40.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_40.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nk8wrIWsGbsbCft6l0mPZWNgQgTTsYcUmFWVvVpq9r3OKVrGQvhcqqMVaZ2tBgAGI4IEKFUbAsKrk%2Bcgi3TgXBQeLdThjf2beSCHhpf17NUyH99Pnw%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniiino_2.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniiino_2.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 409704\r\nlast-modified: Wed, 04 Feb 2026 18:27:56 GMT\r\netag: \"69838fac-64068\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOsefScLUEcBkwXmx3uc%2Bzvyl3Pr8Dtki9egfvKSc4qYSDZQ0MzSs0NzoSV14RQMCrO4FA4kxBsBP2W%2FqTTM7XhW%2FAtIqrHcqx%2FvcJ2Mm%2BCclcJXQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6a82023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":409704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52dc24d0d1659bf606d4638f2ffb4d95","sha1":"fa672ce87d881e2d7464fc05d93e9d7b87789458","sha256":"09791afb247f659f7c1bd1e7aea8c03d024ad4bafa86619e7373fc9cc4cd377d","sha512":"81de108ad094bb079f93b09cd241bd06ca484212921dc5de0b43d7e182f17f220c0c82d5a84cdc186095c05b1a0c26128fa5b24d743369222781e263e490b2e2","ssdeep":"12288:zKFCAODPTK0il6bc+WcKNJCvDw8AqrmIg:mFzM7K0iKcpNJexPqIg","tlshash":"a09423da7994167dc5a4069ffefa292b7b0988e063050e6b75874b2c3f1438f74a48d3","first_seen":"2026-01-26T14:45:09.20946Z","last_seen":"2026-04-25T08:12:17.980061Z","times_seen":6,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_5.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_5.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69712\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-11050\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmfoSOsc0TzvCAERaaEC9fcuzPAPofy5r4iHn7hCcPp6otErnxSxABfoFGOCfqoK94s3VxUrxuhCo%2F1BH%2BfRmzRfDgiSTikeOn%2B6%2BBxgFuCqv8AUwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ff823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d288ba25445b33c1624fd9ff8c8149b3","sha1":"3d68104c0940a6fd2713944090d2520787e58b09","sha256":"28003e113f2ca8ebfef4bb7d9955627abd5a2f663075885cfbb76f7150016a7d","sha512":"e10fe38ffb21aa8c360fdfba5792a3d66063238b7643b5120d9d47e85df13220e762efea9707eaa776e1d638df49704333c53eff00a3806deb44cb64f59e7511","ssdeep":"1536:8LoQYwqTYvPm3cFl9lcjOm1yZKoPYIj0/KgbSh0Z:mYjR3ccim16Y80/Kug0Z","tlshash":"ac63023f2e98ea5d1cd3f65295bafd3a360b343ace3d0c58191013981babf769c18485","first_seen":"2026-01-26T14:45:09.216689Z","last_seen":"2026-04-25T08:12:17.971534Z","times_seen":6,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_23.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_23.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 126454\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-1edf6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQ2cEykIZRN5rYOhXQ%2BYvRrhWp%2BBM9wU%2BNfPvBEMjx6ixzefou%2FGn8xe2zzsfAdDv5rFgnqJZUjYN8mFVlH8tNu5CSk4MsTgGsyLF9ds%2Faju6q1Srw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89fc23ef40e03c49bc40308c883138f7","sha1":"9fbabb58b750eb552bfb65e6f146633b38686519","sha256":"16dc7470b18807741e114d39311d9559574f88a2faeab19b31531d00f7af9b55","sha512":"1bedb1ff22dab8a34e4e5f50bb4274ba8d4834588b1862f774850b684a6701e779753a18bf56a72701f715d8b29687911ff4637af34f3c83c09e29abd6e63e90","ssdeep":"3072:FbYqyM8+f+F6WJSNfc3V4EDigNaGyaHm4R:N6v+f+FjJS8lmyHhR","tlshash":"97c31293b0b3d73be5f6623619eb39cd2fd98a318d081e05918e064927d9e82f9546c3","first_seen":"2026-01-26T14:45:09.203094Z","last_seen":"2026-04-25T08:12:17.977283Z","times_seen":6,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_26.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_26.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qx1Wi0i6gogfxNUp4R4K3WnntBwnhOtC1ZXpkWutmFwCpNVbWBcSjgPLDW2ufmAV0YKUA8rcLbnQyyYMR1uDRoT5c6nysuWvawJTC9aBQoCoEn0xUg%3D%3D\"}]}\r\ncf-ray: 9cda4ab6880e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniiino_4.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniiino_4.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18596\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-48a4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2z8IqFSQ4RvTJqA%2Fgrv%2BOiET1OXG6fKeqya7prsZwBYeuRZOQRfEVuhULXXpcuBcVW7Uzm23JPmQmRoJBfCsJqPBV6Ew%2Fyet8iA%2BklcH0D0VSVNfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6981d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5be756f709f98490612c8019c554fb96","sha1":"c6cfb309f1736787e9655480028e23536f72829d","sha256":"8674fa30ef9e31ee3c19b73a818e6a7dd16600d82bc4f3e2e3644f0a1303b6a6","sha512":"42d510391f5b3eba4e4aa9bf11a788075651829017643982e1d6e7c1ac713c23e3a42c53d696d201e7414bd9602487ea60a801628f233eba8bf44549c6dce19e","ssdeep":"384:XFO2Qvpsh/DdDYL8T2AEOxaTLziX63GTucQ98dtgTk8h5937wqw:XFXQ8rtYLJEoPziXv3GLX172","tlshash":"0f82d0cda085e8576aad9f33dbc53fcb598720bd9f05e4a358189cbb18534318108beb","first_seen":"2026-02-14T05:51:33.038724Z","last_seen":"2026-02-14T05:51:33.038724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_1.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_1.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66474\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-103aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUR8H0fufi34GJS4ptShHz3zVkr6Ng4l8aVMWtlYIZ8wBn%2FhDUvH2Bc9iqvHzOoxySqVJO1sfkcqbT3HhQ2SWup0mje34IsavCjNO%2FYXowwb8%2FWjOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab66ff423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"697b7b09bb44c3470e85151d58ae0f5f","sha1":"05b2dac7dc8ee9f3b51e65e8a507c87a585924ae","sha256":"0f6b9974a9a4f5b84e68d9f66d69768058bea35ca4ca08466511d5de8583117b","sha512":"59429e4058d1669c4f3fe3b7ddef506865e99bb54af773c6bbed523e76512a3eff4920ae3f6f02b07c3b5dd6c6f64178238b2adcbcc30ed9aeb14cb69440ecde","ssdeep":"1536:Cu6hnMfcHrpO6i0qDaHCd/7PkItCIBqw+VEU:Cu6hBHro7ZJ7PkSFqw+VD","tlshash":"da5301ea8691b3085b68824352789bc52fd150479712d8b7fc25b0b90b5f231e6f2cb7","first_seen":"2026-01-26T14:45:09.212069Z","last_seen":"2026-04-25T08:12:17.970487Z","times_seen":6,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_2.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_2.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69088\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-10de0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsZQvXN%2B3o8Kq62caoKBUCu9pHmwqppPupW1Ur9x96cP9BIOEUIlgd9NTWqWpHUzQXnOX%2Bggcoppth4iRZkmp2or8BVPU%2BH4lMt6%2BzS77rBceQfmFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab66ff523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b5c3ed39bda5660a06170953be2c2ab","sha1":"66ca2c9202189e166848fb2107ecb3a4ec11ad90","sha256":"8068cf488d4755fadd9d1338d7bc731da5f872598cf1af1e035bc8872e01ce20","sha512":"d1cda1b716dc5ee223592a3a7481c9ad1627ff492fba40f66b0e879c4738bfb20153ba8d8c36dbf40e314554471f895346798aa56d02e103b7b4294897f60d3d","ssdeep":"1536:igA2BlrUfxrxoxZg4ORSxrwrGh4hae4XXGds0y7D+QndtbS0iq:i84vofWRSxcrG1e4XXGds0y3dtoq","tlshash":"6163027a31ef85107fa454ebe64b988caf532db2a9351c7f1922dc1719c27084d9fe90","first_seen":"2026-01-26T14:45:09.17528Z","last_seen":"2026-04-25T08:12:17.987381Z","times_seen":6,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_3.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_3.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83400\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-145c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEN1vheNcMKXBx5AERdY9KTBlOsSQ63l%2Feq1e5jJA3IAWJhZQ7NdZCSJ7mMAaOd4kZmrwuMIssqNBq9J5bU6500F%2FrMDbSBHEqhjj1gfryCNz3VTAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ff623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6648c338508802a09acc626c089b4346","sha1":"c756547a925e29fe941afc4bbf29de240af177cb","sha256":"0fdca1c149fc366a7cc1bb0feef975bbf09ae51b63ea7e674c5adfd80cb78753","sha512":"352cce26086c5acfaf2c88ec4462e321cea868e3ee7ccc3be68958e2e5bfbaff6375e615bf30b066b6eaa9cd6568242a983b696af55bee0adf9545bb88b5a592","ssdeep":"1536:aNDdIaCEawFxci+YmX2Zvl+7Jy2246GF6pvfR1Tofd2qbsAPp5wbMDH:aNhIez+XGZvAYBnkUTqd2HAPbDH","tlshash":"668312d7dceb9f141f9a513a60923cf7dfb7db31b3a52324a0982b3e1146a54d3421a8","first_seen":"2026-01-26T14:45:09.168211Z","last_seen":"2026-04-25T08:12:17.960876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_7.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_7.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49572\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-c1a4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQHyQgSdy%2F6zCvJpzfkpTfc9vfsb%2FIsKQ%2F07mPVYDow9TwIUSe1CEnh%2F7%2B4th3MOFm39ZfzR2TOIs%2BuNXY22l1GRX4XaS6fmHzKtzxPcRz3AjV3C7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ffa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 497x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d79b553e3a1b0ec7ef181217ebeffec","sha1":"a26b84e49143fa9e39cc354a706e2609f8d723de","sha256":"820d3339f29d9cefadb4fd47053fe84ae9272797951fa2a87c9f67155100bf3d","sha512":"5094202cb8c6f832055dcb902490d7d31c34d6668b4a4bd627e71054b7bcbe629a144a7af617bca47c584e6d08a0ad1a19a3ded10c7c9ec127e913010424f392","ssdeep":"1536:ego3ljwIutRvCs4sKsjpyV2Lg3VjJzIq0R3MfhX:KXQ4+jpR83TzT23YX","tlshash":"3d2302f2bb0b986c6a028d05d8f9a47e0a532aeb8763750faf05d52b75fc4462441f72","first_seen":"2026-01-26T14:45:09.162434Z","last_seen":"2026-04-25T08:12:17.963347Z","times_seen":6,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_28.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_28.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyUVH%2BucNFRmzxrkfWmTU5M4BspQpslv2gTzGEWcd75gVgjVOzDZfwIaQvGzG02qpDX42PLig0GqHnyIneyibWV29VKbxRk5XGmy6GibBEsA2%2B9TVQ%3D%3D\"}]}\r\ncf-ray: 9cda4ab6881023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_29.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_29.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJpCEBg4QssVdmjjRAUbTJQBodwqo6CWEbjzKXXwg8Kqq1L6zQIc4HPtnge1du6B1LFsjIWYc6MbLU%2F8c6CS5gH6wvEdc5QYe45v5q8SDLbsZwygxw%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_34.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_34.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oj8wUzqUyaznfi3a%2BTZ%2FyoHA1eVVGLduHgjgOWkcT6k4fMPqcRT3cHOvX5ZNbIh1q%2FTEo9CyqJWPj7mLTPhyGy0uOs1643semL9C2AC08pFtN7AZvw%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniiino_1.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniiino_1.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 577206\r\nlast-modified: Wed, 04 Feb 2026 18:27:56 GMT\r\netag: \"69838fac-8ceb6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDFMOiICtuHklYjZScdbP%2BD8WEh4q0h2%2F8%2FmQwkfTALK%2FxJ8XMIRYaCnO2rkg3BAiKPyFIGuBNnWhwxEICUTd2fxg61%2Fqt7XLCE9G2mNe1uhfoD56w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6a81f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577206,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 4800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f69e937fdb5c495e56a379efba9d8a8","sha1":"ea53c23ea17170b8a42f35629cec0fe911ca41e1","sha256":"4cf5a2645f516ae1d0d0ec4c999bd567e10b3f2c2fef59cd820a2c103b268159","sha512":"3902306e3bc5100ab679498650fb376a1c6cc3068f826e09031738a98af25795cde692efd8f40625c4a30b48cc1ad07b4629f8a00d3f70b6f38cec60f785ba0e","ssdeep":"12288:yRhGwS0TeASKXbwZBKnE4AgcGZAzG7JFdP7ShAdZ:yvGwhLSKXbk4AWlihk","tlshash":"f8c423d447361786e59c2ed82d615c45e0864d0cd2ebf39aba847262433ab49fbcdd33","first_seen":"2026-01-26T14:45:09.184975Z","last_seen":"2026-04-25T08:12:17.96546Z","times_seen":6,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:51:06.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:51:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Feb 2026 00:01:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFiYS8noZft5VhhTVgjOPYBleJWaI%2FTw4NMyq6XBDxDcWn7Z0NNoknBFxOcYVd9tpsUX1idKl518fYqZPfxCLgH1RBjyY8%2F41lsRR1kkt4P4YKS5nA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cda4ab23ae58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29824,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (429)","md5":"62237e5ded1ef0635f3a9130224984f0","sha1":"7990b371d9f3420d0da62e733570a6b27e0dbf65","sha256":"f425ce041e6b32dc0b3ec5a09cc570b00a48d075d5dcf27157147a995cfaa206","sha512":"700286a1a64446d9467a0408d6421b24436255a9bc76fa7effa15514658b73c2facaeda24021c739528406145ca3191099c06b49f529866862c835daa469fc47","ssdeep":"768:xFhWoQRu7eTgM4ZkOKXT7ByrcojNRkcmb:xPWoQzgJZkOKXT7wA/cmb","tlshash":"e1d2e76002bd106e1111e016fd077b0d786604bfbb2b9b557a6c28be7fe38a5c67e319","first_seen":"2026-02-14T05:51:33.044353Z","last_seen":"2026-02-14T05:51:33.044353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":83,"dns":71,"connect":1,"send":0,"wait":218,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/2.jpg","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/2.jpg HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25117\r\nlast-modified: Wed, 04 Feb 2026 18:27:56 GMT\r\netag: \"69838fac-621d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXBW45LOHoqHQvZM3NnrGGIDrTWrrBtsOz1gDhIImgcotrE%2BGM7SXhqktqX1%2FXaAFXdKd3KpLjiOWKNLggoBht5bPwSRQl8kpuRXbjKGfJnCcgg8Mg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab4cfcc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25117,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 425x447, components 3","md5":"155e2a885aad2d0c4804704493a9a502","sha1":"b34479a08da3ae7d26103886a6c7832038f57669","sha256":"6cdbdd9acdabea29c7dce87db57ded5d41154ac1efc33c63b5c8a68da3ecf764","sha512":"56d46e8c830bc682f9c09a3634f7636f23c9f57b1d1e0fa432fc33581c67b4e8299bb80621413ce67b24a5d2b17d27447c36d88ec27ebc22bf04c0a7009eed3f","ssdeep":"768:VfNZkex4a+on5Mwbwz9GENgGJ0sbmjoPOIx:Vf3kex4urwkixbm2x","tlshash":"50b2e170f60047582a12d63abc9fe0b6961daa0a7ce5fbef3c4a118b4675db4e430c45","first_seen":"2026-02-14T05:51:33.045314Z","last_seen":"2026-02-14T05:51:33.045314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/expert.jpg","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/expert.jpg HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOcfPRjNHwIznYTlQGFHqiVqCxBvR4sXpot0X4WJhet5rBtpGzCaf2M303QINq2RXD3yRK%2FumQE2aujqSLMweu9hdxAMUQl9sLm3xEADZg3X%2Bpja5A%3D%3D\"}]}\r\ncf-ray: 9cda4ab4ffd323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_6.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_6.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97736\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-17dc8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGbfVEY00K%2BUlTEYP5HR5Rf%2Ff9Fr0zfknu%2BhjNq8M2gIIJXHEMo16enUJZasBkZ1e705hCNa6N%2BVMPrhzSlvZ5QZeESIopkGfmVbcTvN3jsxtR%2Fq1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab67ff923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2441dc29ea7b259cc1347b9c750d67c4","sha1":"a90b45f58bea7c03c872966ccc279d8f72554862","sha256":"10dfa1e04d548127b1b6fb13bdbdac14e9722ced582c1cbaf4884deefa72c633","sha512":"421ce3931d89c440b50d89014b9a54215bd030f6d3da7817776097b1329cfb856e74ad5d1d11cf91c59132956d26200fe4c4fe4116bc6d2859190b8537a1e355","ssdeep":"1536:yEMAiZSNANZTVPam8BTo5wHCBMUpr9a+QwxKgXUnm/6hcgQgV+f6RAbgTtur/fRv:jMAiZSNADVPaPTG9BMuFnxnXxuc0g6gJ","tlshash":"7da3027331ea3322d7f67865bb77a217b61d579443b33a8dce0065ad09d0a573ea802c","first_seen":"2026-01-26T14:45:09.187214Z","last_seen":"2026-04-25T08:12:17.96223Z","times_seen":6,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_19.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_19.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88974\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-15b8e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WGb7FPqfPSyL7na%2FZe40AUxRp%2BZA%2Fppin3HouXD9DinEjHS87wqaHtyYgShsLiU9NvutScRUp4YkstFn6u2v5lr8UZ0DQIxfbPYyzvoM4obZY4NJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55d37f0892e5a5ac6214ad08a17fcd03","sha1":"afe25c24db947054cd2c4392342216d6ae425fd2","sha256":"038fdf19ae20b203c35ab6f07d8ab09b2aba68d3d16f06a84378c05037a25517","sha512":"42c80f4b1cfdf8b3d88807c4738f645bb1441cdb59ba83d38e10483230e4c64625e3ec5a4977d091a20d5246f0f5222d8ce4b4e3fc804b9b732e50b12a2ac4e1","ssdeep":"1536:6+sKTeuA2IumSnlM9spnv9jJsjJEeIjC8npg4W822cPm6oX:wKTx9IumSnaAFJsdEeIjPpg5dPmn","tlshash":"ed930257f4366d7a000aa7daa55733323b5eaa60ef9851334c66eb42f13bc35390f129","first_seen":"2026-01-26T14:45:09.156481Z","last_seen":"2026-06-23T19:33:09.616981Z","times_seen":9,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_36.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_36.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urKikZbuPHBN17CWNG2kG9%2FynjWqTOh9BdPnTN%2FrOk8Zp462FDg3PyXjLJhXSqcUjb%2B%2FiNhFAU8g8B5XIiCvAMxfxVUSzim5BajlzYohs%2BjzwNEWAg%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/logo.png","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:08.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/logo.png HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdmaGN%2BAKY%2F45JB7vbfonYVv1T6krBOhkk8aK0jkifnMCX13N9nHMq2Y3V7gTvothGSBNH9uTbjT9bm%2FDolH3RUYkJgpTz52PIzSHzDOQoqkHa8zpg%3D%3D\"}]}\r\ncf-ray: 9cda4abcd8c623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_15.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_15.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65356\r\nlast-modified: Wed, 04 Feb 2026 18:27:58 GMT\r\netag: \"69838fae-ff4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qQE6x03z4S2Y7aGFDpuIqzineYboDkWZ3h8jpfPLct0c%2BHFueelpD8BzhkdtTJxG9rBfvSHmtB9AROUTv6GnDcr9bQkj8e6vOKu3bwxE1eNps0a2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda4ab6880323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6a22ac1097ad0420ecef7596636b884","sha1":"575cb1ce2caa0de53b82b0918f1f56b25a0d7d2f","sha256":"c5f8fbd7f994bc7e809331b09e8c46660ccc3e16eb55dba3328ac91b82f86d80","sha512":"e206b1f0a99f9d055abcc2300cefc9633aa43bbb5ecde68e3b63826c33265fc3e8b74f1bbf3b3dcb75bd65f2d5b231090c4beed4ce087199016ebaa9e5221150","ssdeep":"1536:RC5nKE1AvlfoJvXs1TF7PyBkf8oMat18W+TBeLDVUm5Gv:RC5nKI9JapbyOf8Fat1Ye/VHUv","tlshash":"0a5302dd4a361332c77b94a59ba83e743fde8c47759df0519384e5e06e3b2221202eb8","first_seen":"2026-01-26T14:45:09.165431Z","last_seen":"2026-06-23T19:33:09.613845Z","times_seen":9,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_27.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_27.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2iYB1GED3eIaAWV12i54Rvl%2FuvAv7fGKt9b%2FhK9AZKKfyLA2xuA4sw9YfNwnOG%2BWmtBSpGQZVPC2nzZu4kVFNKDYU2f3udZ4unidkIwgc5TcuK3Brg%3D%3D\"}]}\r\ncf-ray: 9cda4ab6880f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_30.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_30.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSVQ9T4HY2DjLxwD6nHEwXYLBoBZu8XGfp6dl80qwwvzJCAloKR%2BkB6aJjg1GNvB%2FpSMtspVSaiSc4e127dgo%2FimUwLUjxbDCHR5PRrafg5NTFxsjA%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kraken-vhod-onion.xyz/image/kiniino_38.webp","fqdn":"kraken-vhod-onion.xyz","domain":"kraken-vhod-onion.xyz","tld":"xyz"},"ip":{"addr":"104.21.8.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kraken-vhod-onion.xyz/","date":"2026-02-14T05:51:07.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kraken-vhod-onion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:49:55 GMT","end":"Sat, 25 Apr 2026 20:48:36 GMT"},"fingerprint":{"sha1":"A6:51:CB:EC:94:79:E9:B8:82:F5:36:47:3C:BF:6D:AA:E3:20:CE:B7","sha256":"2B:9C:9B:01:39:65:DC:00:3D:35:2A:BF:0F:AA:B5:57:77:9F:FB:4B:6E:F6:29:D6:46:FE:53:F7:45:3B:30:6B"}}},"request":{"raw":"GET /image/kiniino_38.webp HTTP/1.1\r\nHost: kraken-vhod-onion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kraken-vhod-onion.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 05:51:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 17:55:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdvQ2OtpAZR0BTqLhIF6zHfLFND56Np0QKo5T6SLKb6fD3r7iOPm5r6TyAGjYIPTwcX7ITHSY254e0N7QlEHDT%2F5XijSUh5i2NgteHciFjrusk5%2BaQ%3D%3D\"}]}\r\ncf-ray: 9cda4ab6981a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-21T02:35:55.761989Z","times_seen":7597,"resource_available":true,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":888,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kraken-vhod-onion.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
