{"report_id":"fb009f95-c940-4212-8fda-cc34ce620172","version":6,"status":"done","tags":[],"date":"2026-03-30T11:50:57Z","url":{"schema":"http","addr":"krakex3.vip","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":0,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"krakex3.vip/","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"title":"krakex3.vip/","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T05:07:07.342121Z","times_seen":17756185,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakex3.vip","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":0,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T11:50:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.iconify.design","ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-03-26T04:31:30.899304Z","alert_count":0,"request_count":1,"received_data":1856,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-03-27T12:59:34.981187Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"krakex3.vip","ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"domain_registered":"2025-08-17","domain_rank":0,"first_seen":"2026-03-30T11:51:01.914714Z","last_seen":"2026-03-30T11:51:01.914714Z","alert_count":123,"request_count":123,"received_data":5227415,"sent_data":54922,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-03-27T09:47:42.991715Z","alert_count":0,"request_count":14,"received_data":32846,"sent_data":8193,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-03-29T15:54:15.468649Z","alert_count":0,"request_count":16,"received_data":180818,"sent_data":7234,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-03-28T06:00:44.855015Z","alert_count":0,"request_count":7,"received_data":338059,"sent_data":3549,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-4cb28ea6.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fc565663046785c73279178fd07ee961","sha1":"432e3dd5edf33cc368847b9b160aa7bd91c20abd","sha256":"39f6d4dfe06a9415fc42e27f562fff81063da761a718a4624160b485482273fe","sha512":"188a59f70989b71c510977cadc2db23e3e72e08b527a87640d310dca088300f90bd2752f1c87502a08c55adab9c95bc2a50b3ec96db1ecf0199a440c672b966d","ssdeep":"96:vCz7IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:O8aa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"28b1a7d17190fcb7d739dacd406042e097ae57e07019c5deb15f9e03250acfc66eaa49","size":5151,"data":"","first_seen":"2026-03-12T16:55:22.831707Z","last_seen":"2026-04-15T05:45:13.335899Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-ad0cf90b.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cda56e760bd25cfb758c254f2141c161","sha1":"1b0146e385cd09be690f8c1a7effe6addedb10a9","sha256":"99e8dc7c9dcd87b36f9295d175c89a4c762cd902b1901f7b4de4aeec121b24c6","sha512":"3eb32cca620e4e7da07411329fb966ccfecf48ff181f8a34d26a2f766c96a780bad617a2bacc3877d1e357650fc432290d4eb11f784d97a705a532479e486491","ssdeep":"","tlshash":"db516221f042ae3cf3b750652098784865410fa899646af7b1ee5e0f23d9d726b9f738","size":3101,"data":"","first_seen":"2026-03-12T16:55:22.842075Z","last_seen":"2026-04-15T05:45:13.308718Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-06T06:08:37.448672Z","times_seen":2154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/if-defined-39ff01ec.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3eaeda4a4879e8acad1735fb4ccddd26","sha1":"76bebef49b1e07d9e23f7986d5585aa5f68cf2f0","sha256":"e283c993d87fdea0d861cbbe0f8d02c57ef0b02b6ccc41ac5acaad8589bd7858","sha512":"f332fc370abf5c75fc6637fc1c35e2875dae57cf0c777d829757045d6232ffb41bb0c6b8b52610ea43f08dac2fe5f21a1440e8df99bcfbe12a46b8841676e6b0","ssdeep":"","tlshash":"20c08c12a82901e34cda038ee864cd4e5020326e5f524282b0a8234688321805a9ec16","size":161,"data":"","first_seen":"2026-03-12T16:55:22.81621Z","last_seen":"2026-04-15T05:45:13.309752Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1107c1b3.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6510b61fb435b11e269b698dbf41a2a5","sha1":"d4484c8f930015cf050f7f8fc3429eb2878e4284","sha256":"fdec41b69bcf830b6339ba7062b12ae3064ce044a475e2de2cae3fcfe37e78c0","sha512":"e40fdb466a63aad6a911a28ec628f818e81a969a319482c1a120e6db9a5198a3b41cb51cebf4c7072b0070ce4f05f2c6984ed35e8d7162ea1d34fae4325baa17","ssdeep":"","tlshash":"9951b8d7b33a1176385592941eae4ee05233e01ba11cde3ebbcea1f84f461855c36632","size":3023,"data":"","first_seen":"2026-03-12T16:55:22.801034Z","last_seen":"2026-04-15T05:45:13.315655Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1aae9526.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e35c6d2283184da2e2ee2f962d978617","sha1":"77642f77d797186b495e610e59ea15f9e8c0b170","sha256":"09dfaeb54ed325674968b34ba9e5c9053deb7de0675545af1a9c047e322c6712","sha512":"8c7a6804cbe68fe7a0a3f1a4a06a1ef242a4061e0c617c5c43ce2e037702099396d04d33df92b7483b16fc858d72b7d11a869a8660ae30ab0a5b933e27a0e014","ssdeep":"","tlshash":"642136881669d7f205859599c6e9ad028125051bcf28d0a173cce1dd5f6ddc4c5a6b33","size":1384,"data":"","first_seen":"2026-03-12T16:55:22.822404Z","last_seen":"2026-04-15T05:45:13.297627Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"99f627175d32deced3144853ae54119f","sha1":"b9c761a937e659864b4f04fbf3d132c8d5c72e98","sha256":"85765635423c64ae5bcad7124ca3f875207202eab7339219f772abb11944e1e1","sha512":"ca22ddbf642440e4f4ad9cf8446737931589848bb2d0acd04419299905cf6336a380389f0eb417a68e6f53c4c9bda61489bbf641448f26129d68ca92ae95d2d1","ssdeep":"96:mq9hafUCzCSDKCfhpq+hqqGtdMVZI3o5R3w3fo8C+Nqn0Si:d9hafUCzCSDKCfhpq+hqqGtd2ZI45RgT","tlshash":"a7913e67b0e3005845a37a644baf732c393b600b3a0adde47d5e1b609f57f625482bce","size":4453,"data":"","first_seen":"2025-11-24T21:16:20.877428Z","last_seen":"2026-05-31T17:09:56.37932Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-29T22:52:22.757317Z","times_seen":919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-6857c7ca.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"861c6afe3395c6a9378ea840dead57f1","sha1":"cafb73158459679a27d00e420c15c65bab9335e9","sha256":"4645a9a90ce3679e043ce519f5eaa0092397bc7acf57eeedb4d225bf8863877b","sha512":"ab76ec9a16f5adf8de00af6c2674f0b0716d80d6f8cb582a23231cec865c0d30fe7810d5fba313d65238cd473589b10559dc60846459cbe79da430a3cda1d309","ssdeep":"","tlshash":"30515484a6a6581e520790adc7bf4c01973ae41fd029cafeb6dc90f54fba98115ba331","size":3036,"data":"","first_seen":"2026-03-12T16:55:22.801817Z","last_seen":"2026-04-15T05:45:13.3107Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b0558491.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"556ecdeb9bb7ebe08ad0ce62d0610ad1","sha1":"2249021bcb040da591a7a3717bf84c93bd257f44","sha256":"6912a59242d112cf5a57136922fba35bc1c1f9ad577cd101f6e3441b69247def","sha512":"359792ed4788b72c8e5ce6e243ee25ac636fdee54affa86dd96b8cd5b2a6e8dff4c4dec0a758c293bfaabf9952032a246179d125f50ad8792521673c3bbc4495","ssdeep":"49152:fzUmhCT1befIy2EUGo/PDXg0sw0ERirdxQR1lSE0775FJZICKDhlhTqfXxy3yKbZ:fCAXxuyKbdJKSfXtyS9","tlshash":"a4e58e847295b07907a755d4a4671102f1385ca5b05ec0a8f6ecd8fb3afa889c67ff38","size":3265402,"data":"","first_seen":"2026-03-12T16:55:22.89109Z","last_seen":"2026-04-15T05:45:13.396161Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/receive-dd4142dc.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69cc40957c96ab75bdd1be0576655109","sha1":"c0f74683887b55a4b4a52ce1467b19f682d2f73a","sha256":"8bed1ea7bc1dcd8183178033558f3d3c6e26868fa66f9504eb73b89d5a7d22f4","sha512":"da807948303a1ca83afbb3e0f37128f5c123356a843d4d11f0183858273540d61a98db52685c47a9d8afae66d5117d4b89f080fa316acb48d7fffb699f828783","ssdeep":"192:XXIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:nd23vx30IXuTjmpqAY4c","tlshash":"06d1c64559b638adb812d0981e969a00c131404f9539c5fdfaec83e58fe968689ef722","size":6621,"data":"","first_seen":"2026-03-12T16:55:22.839211Z","last_seen":"2026-04-15T05:45:13.321757Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/ExchangeController-66fe4177.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8ece541558d1cfe3bbeb5d8fb963eea5","sha1":"0ac08983e14232d9e44be93da349f733d71935ee","sha256":"a661fb2f90f3b4cb26b0e1e2d1c55d750eee336cdc4aa4b6f0642ba6e5343800","sha512":"a33fd7000850094497467ce746958f79f66f790bca9ea329b0fd368b9db809a025b61b787a893988cf4e32f8f54170c3c1a000ba5b0ba8a520f8f26099d84fc9","ssdeep":"96:RvPMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvPM1gE2k+1ei+NFnopzo2Vvh","tlshash":"e5a19600b0f2703396d929a025752520cb6d4fe9a467c5d5dbec0ea66980eabca3ce34","size":4729,"data":"","first_seen":"2026-03-12T16:55:22.810504Z","last_seen":"2026-04-15T05:45:13.324871Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","size":3315,"data":"","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-07-01T21:00:47.755737Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d0518d72.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3bd90731de83d6c59f377ef197bd6244","sha1":"e59af6e2d099541b9be9f6e525083256f4bcf1f5","sha256":"c6c6b988b51d40d0a6ef246c47bfb5dcf408448620ccf3e11eaf944ae978a0b5","sha512":"67b5b7f5fdc9b6f35a58e35a9b2f3972903654d3edceebf8daba0d0d2b01609f78e734f699497dd2f62d8d9b00f2296b1dda51cfc0e203a278b493c949ce8c23","ssdeep":"96:GdhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GdhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"d3a1c7f77167e7e0951747f5ccf73811611b3cb6bb064e0aa58ceac8de16184868ce10","size":4843,"data":"","first_seen":"2026-03-12T16:55:22.834443Z","last_seen":"2026-04-15T05:45:13.329394Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-500545c0.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"de35a8a60a9117e3cf0b29cc71f26838","sha1":"4615b88938ffbad2a0ef2744acf383cd8838ffa4","sha256":"fc996c43f3b0f20eb4d724f9c7af53fbdd66b800bcab392b690e9e32649f49c4","sha512":"ad4c41b71223bcc0bbfb7dbfd06e4ecc8ff4e29f6cabb8e55589666304ae61e1fd4634545f444269891a91a2190ffd87be9777a962339e877568a0ea8718f151","ssdeep":"768:ElYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:fAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"ce431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","size":56425,"data":"","first_seen":"2026-03-12T16:55:22.854707Z","last_seen":"2026-04-15T05:45:13.326294Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/SwapController-32be55a1.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"27174423065a5660bb1fef9d0b994425","sha1":"ca09f76058db9c415401a7b0926d808111c87213","sha256":"8fc76e2362edf3ab52ddfbe58d162f85db5558ad6e46165e410984cd80f9a060","sha512":"a37588f0e3bd281d08df9b5fed49f842293d3757daa692c25f4a2a926d91e564e87af8e4c069b982c84421c3130a4c331684b8922a3c082f4650d28cf8669556","ssdeep":"384:Nd0FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:/0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"595264a27360b676471e729879f9131025221cd4e86ef4ece8ad05e30ff159f1eeb921","size":13816,"data":"","first_seen":"2026-03-12T16:55:22.800162Z","last_seen":"2026-04-15T05:45:13.299618Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9e1633c8.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f672dbeab2a79f477b63594fa5edb68f","sha1":"ce196a3702377e096b4681df1e2f7fa2c1f8a220","sha256":"92dc11e4d87dd1f996a4ef6906ba9957b4d852c53deca6368fe31f3289e2722e","sha512":"84a9780466f75eaf8274eab8307b6e1755fdaf43b08f844b7fe96597f04d59ec3d1eabd29ba638c33898e8d44d79859b3a8750dcfec241173c32dd561a654e6e","ssdeep":"","tlshash":"c9512e85b213a8f7386261f9069f9315662438120aacd62878dca596cfce7efa434123","size":2511,"data":"","first_seen":"2026-03-12T16:55:22.860481Z","last_seen":"2026-04-15T05:45:13.28835Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9a6a5dc9.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b2c0a0cc945cb89cf466022af34f1e53","sha1":"09ccfd82eb75e2590f2ffa1fed3b7786c218fd3c","sha256":"6003c01736f7d50718c5c287059f788474debe9d23b75849215ada0e5c968a6f","sha512":"ea033598e556b3caec8382125d4ade834c0e72e7d48d9627dc63ed4c20d9542afc9451e7291fe9b6588a6afff5972924b99bbf259877c323561682ff923d72eb","ssdeep":"","tlshash":"e62183c9276acaf0896140768f25350132376007972fda86b6de7aa48f0c5c58a6a7bd","size":1427,"data":"","first_seen":"2026-03-12T16:55:22.807481Z","last_seen":"2026-04-15T05:45:13.303589Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-49d29c21.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d638dbc28c50dff4faed1ae0eb44709e","sha1":"fdb393477c3e25b2a826037cc1357fbb8b85d5b5","sha256":"8fef8e5c0bead675652fc0aad7c900dc5fa8a1d5a716facd2be3c8f373be5a40","sha512":"19abfad261a6b61b7d53d5f3e053c2b1af6a30cce047c6c3efe6254e1e737f1d9da2601dd71207cbfa4336d0fceaf0b1df3156fdbb49c0020c2e6f5540bff8ff","ssdeep":"3072:G5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:riZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"c324f8546bb069186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","size":229987,"data":"","first_seen":"2026-03-12T16:55:22.847583Z","last_seen":"2026-04-15T05:45:13.355342Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhX-3214edf4.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","size":2498,"data":"","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-07-01T21:00:47.813552Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a8333fa4f5a7c115c3d338f715d710b6","sha1":"85d9623120c2753dd2de36578cf1cac587152bd2","sha256":"4812d4d9a9636856ee3e917a3bf0eee7042b1969f9bc5fdb900754755b32b90c","sha512":"96d4a581ff47246c45fa475a2c2874a2a2d2387d7ec1043b58ed94569af99c55647fab01eef77deb3ef15451d5c8cd1c15257efd4c9c67c3dd7e67de9dac188d","ssdeep":"","tlshash":"b3c08cc4a0c23f146702651110bf3af89034442679482b139de4e8993e620f09237eec","size":153,"data":"","first_seen":"2026-02-04T16:46:53.927086Z","last_seen":"2026-07-01T21:00:47.825726Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-7cf1ad98.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"69386e19d1259595921129156676e7eb","sha1":"57b44a4c9162e3bc65a45d86cad67af07998b0b9","sha256":"4f18a271ad4bd5e36ae65ad8941a7d278baac94681964b6575ae3a6a7a05ec33","sha512":"bf6b0c740470e63a2457dd8362a352cf4fd5ccde66a1fd8496fa50e400cb4bd06d24155a8db87f362b321ecf40288d744041d532db3c512950e4fa6a84fb7351","ssdeep":"96:Fi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Fi0K9+N+DF5si6SJHG","tlshash":"6bd12fd13e756e041523c939a7ae9d49e331a037c83989be77cc91e08f9da405aadb31","size":6313,"data":"","first_seen":"2026-03-12T16:55:22.843738Z","last_seen":"2026-04-15T05:45:13.368187Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e0a7343e590e4b2e68fea466ac533796","sha1":"157955af910b602def2fb7ccb3cfc2349619433c","sha256":"1f4e9a9aaf729ae7aaa8082a6c4ccb3082cb5bca5d7ead0f6d129b28ba4ce60a","sha512":"fe989f835a81f1d2f0d611e0750312a9248350632f70aad49f9d0113d7d1ef287e2bb5cef46867bdeabf3a5aaa6f5b80ae07eca85a7ca81ac06e1e0d5b1dccfe","ssdeep":"","tlshash":"e6c08cc4a0c26d005a52a61110bf24e4a024442b70885b028c98e84a2e220b08233e98","size":142,"data":"","first_seen":"2025-09-06T11:46:38.61477Z","last_seen":"2026-07-01T21:00:47.826551Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-dc6c0f23.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"34d4b40271d601275b4110dfeeae6f06","sha1":"8dc4be576be03d1321365f8e76eaceb6351ea1cc","sha256":"d6f2a417c26b0a4b457a8dfe02f13b7e478e6454b8698f7bec40706985576454","sha512":"eeed29ae3ed96b20ec5f0536081f1fc3a68d989c4c621178b9d467b034aac1f443ec12e5cd864d939d4d37fdad5d2f35bbe42586ff9fd31595e70738f9b09169","ssdeep":"768:1PYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:9+qIzcUWb67sHYbzyER","tlshash":"3723b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a719b1618edd6bcda","size":46047,"data":"","first_seen":"2026-03-12T16:55:22.83672Z","last_seen":"2026-04-15T05:45:13.362208Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-fc6d5a31.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e1006835216683dc17e7b93a2b97ad8","sha1":"c486940c30ff8b9f716697ac8da66ae85be7be7b","sha256":"2cd22ea99865c65f65fc2aa037057dd1809df32cc0c6eaa9bfa937be197bcd5b","sha512":"476eff1023d4174f2900ac7a40a1b3598feaa34e5d50369adb226e7c66cfbab81dd7aa77f07ab2a9bbe29f138ef8f0314fb17a213422f94c94f669e8e0d1fd5e","ssdeep":"96:1JPHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1VHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"1881c5857330d912251e8a6867fb8206373a50274225c4fcb6cd9af84fbfe459b75b70","size":4104,"data":"","first_seen":"2026-03-12T16:55:22.824614Z","last_seen":"2026-04-15T05:45:13.298616Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1d08d906.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4aa99fee6dafdfa0ca721935abeb1b6f","sha1":"ff87b575043779474c18a9edfb0884bdd35ed14a","sha256":"8e96b3d61ada813ca5d45f205022f238f7c3cac56ca5fbaadae85738b1fac16b","sha512":"ac5dabec749cbdd5e92ea0f27b1528304103d15c73938786664db42597383b01f8d48e014bb228fc1ee4a33ca7da820a13006e48956851d531e348944a4c1e12","ssdeep":"96:WXs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:Es7o9KK8ZMY2vcpaC5c7eI","tlshash":"3aa144c22daa252a3951d099ae5b8910e322c007d21dcebdb9dca1fccf595c3107e722","size":4734,"data":"","first_seen":"2026-03-12T16:55:22.857337Z","last_seen":"2026-04-15T05:45:13.345845Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","size":69,"data":"","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-08-07T04:52:15.520576Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-8e60d136.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"64e87bcb6c2688f973f5ae740a407f74","sha1":"de592c129157d3cdc56d8d60eb5f363fc4545f73","sha256":"3161d739b5ddefe4b38ffb35b5443064de5a6080b5bc22045521b6df70438dcc","sha512":"56703fbc95be389a33a6dad1b1ce85c0043a7974f780d32456b7f750046f34082ed4fa95ed9c1ac2227734f2f54b5cea36c191b8d44bc71f0e8b17dc7dd44a15","ssdeep":"","tlshash":"aa21658417bb7295b5576189463c4b06d23240539a1ccf3d73dd76e48f5c1c988bb324","size":1270,"data":"","first_seen":"2026-03-12T16:55:22.846803Z","last_seen":"2026-04-15T05:45:13.383855Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b74b5775.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7feb369b0717ed940fc77726cb756fac","sha1":"039b1a4bb6172960d9d30cfcbfbdcee84ce7ebb5","sha256":"9d048059a94ebe46312c6f775581f0cfaf60d3107010b3841af248ccce58e6d9","sha512":"4d920161c3df1bfd7fcbbc6065b3d9c817fb75a19ec47c56690219ff1d42ac7b20563d761bde3e3e522c2c212a8d69a2bf44c55191d607da3d9a2e2160ef7ca3","ssdeep":"","tlshash":"cf319585637a24a424a3d0e50269da201235642a921fca7cb2fe71f08f7d4c0653b712","size":1576,"data":"","first_seen":"2026-03-12T16:55:22.799237Z","last_seen":"2026-04-15T05:45:13.357332Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a1ade1fc.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"afbd5b4f8e7f8b2912972faea3330203","sha1":"7f14c7ce2c7d70e5dd677a5faf04d1a57dce0553","sha256":"08c1d3313dd2f22dd0a9dac24efd7cc641e2ab3e0a38378ab2e15f358f5aed21","sha512":"95c04b7b6bf21ea096f5ec6c16d01a33e563c1e05315709393b25feffa6bc62b32d524756c5b315fcee364bb2c6026f6a4f842e884ae1ec6cc482d075646112a","ssdeep":"192:QBhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:Q0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"1672a7ac3693bb28a9875bec26f55150f6343812442ed5bdb6ddc3e28f16a844cb2371","size":17121,"data":"","first_seen":"2026-03-12T16:55:22.825409Z","last_seen":"2026-04-15T05:45:13.379612Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-06T06:08:37.439375Z","times_seen":1807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/VerticalTickers-51842e44.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"570019ffb59b1cfb223a5cd7949c9c0f","sha1":"5c90a3e3e92c0416511cfd026f3fda75ebe31d6d","sha256":"e1a6013a6da2dd7f0adf9fe7a68ec96033c8121e15532a780e16f0c206cfa698","sha512":"8ab4224f9ad7cc8c26415a494b9152a05b542fcfdb72529f8a29e5e53d29c3b65aca566dd5c8ba70443ca47397aec07c9305242d4fe53d47124ad04377d0cac1","ssdeep":"384:i7589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:S+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"8ca2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb95d25f7fa9","size":23018,"data":"","first_seen":"2026-03-12T16:55:22.84593Z","last_seen":"2026-04-15T05:45:13.334247Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-0944fcc2.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b32e02ff4612b55b84ae058268999916","sha1":"fad1adda138cdd7a63f8b54fc5576a0b2c4de283","sha256":"56a4f536e7bac1aabea2a016ff2595143fde4eafdc144794c87b3b7627d094a9","sha512":"0158731a385a91437b2954c923e2ba10addba9667c668ee7cac6b0bf040218d12fdd15d274aeea7f3128c8684fde19b4cfdf7da08d1f2463db9e837ecf01d7a7","ssdeep":"96:wZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:wZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"ded1b5bf3d666415a632c0a58b928c04d131901757088c79b7fd19a8cfcea89766f764","size":6571,"data":"","first_seen":"2026-03-12T16:55:22.837675Z","last_seen":"2026-04-15T05:45:13.382489Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","size":2776,"data":"","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-07-01T21:00:47.792187Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-c24422b6.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"62c5cce2d8883f65cb2bb22412ad4452","sha1":"701a9c740954d6e33658fdc7bdd24dca5f9aa14e","sha256":"2c00853f4d1bbf86ac33682faaacb87d60fed67ba4ffe78305ed41dd497a422e","sha512":"687e8931ac7e355e7460dbaaa828e09ed28aa9c624e03975fd52e13b31021681ad8210ee294dd957f83f50d005cee5143d4be2993475f2fdb652d4fe1868cef5","ssdeep":"","tlshash":"fb5196d0bbf7797d65328029a4aa9c104322c007d378cbb9facda2f64f9964154e3376","size":3075,"data":"","first_seen":"2026-03-12T16:55:22.804223Z","last_seen":"2026-04-15T05:45:13.286903Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-ddb31605.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"01e180ccd3a6abc71fac9bb289ec4f02","sha1":"58ab965eb4025e21aa492a23bc3818bb463ea66e","sha256":"776ea42996263432291bbd28400bf5b5a72debbf92e503e64a544940bd551187","sha512":"71d9748d7232ddbee0751e6b55b7572239f72d3aa911de9ac5911946252af128dc4617533705ab524c4f7370f9bd07b5d5babbe38417ba2a069ca3c291c0c988","ssdeep":"","tlshash":"d83185c2f1db2579b37adcaac0984461d23c0949f50097e6f17f5c1a2b601c0bf5ab18","size":1814,"data":"","first_seen":"2026-03-12T16:55:22.823313Z","last_seen":"2026-04-15T05:45:13.314817Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-08-04T11:59:59.100391Z","times_seen":803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d90b3301.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8c674da81682dddf5a26601684c71665","sha1":"ffab90e19b3e776309f73b6d2bc84f8794ef833e","sha256":"791a8e9aeb19cc2459a8ef12619ae653d77216a3dfd33bdf6fdcb0f2e489bfe1","sha512":"e3289b8c81428fa5f21958a048f9eb4d902e2a56b4236831d400a85a7cceff2bd5e6821783cc60ef06b149bc731c9fff42738099b4631dfc0ea25937825ab432","ssdeep":"","tlshash":"af51fdc1ffa8a26ab70bc1bd155ad914e333f00540295f7f7bca12f14f5d584241eaa4","size":2994,"data":"","first_seen":"2026-03-12T16:55:22.820744Z","last_seen":"2026-04-15T05:45:13.331089Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a5a83fe8.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fd28098fd42abb3e7c53052d0b7289e0","sha1":"83083e9919a8e4f75d03ee936c768b565190dc6a","sha256":"e7c4eabd860022c67d07d45a2e1f96ddbdf5b329315fcc1f0ad1fbb429d95913","sha512":"7e4be44e3aaca0093f2b141a6a626c45a0aaf441d4dddcba1bcc926f25d59401cd72680e3333cd1cbba730b494dcfaa34cf71d8e9604aa8cbd897be50603bf8a","ssdeep":"","tlshash":"71511188bfb43d63371bc065f0ae8521e335a03a9c1c9e3e739d52f84f69682555d932","size":3015,"data":"","first_seen":"2026-03-12T16:55:22.849579Z","last_seen":"2026-04-15T05:45:13.281334Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-4b7f89b5.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a86e0f0ee2c1c7befb74cc5f4a84bf45","sha1":"3d588157398156805196a7d092edd30967308fca","sha256":"156156a0f7ba3c3a1c11b6950cfe15daa40de2351a65d53e3db60333e79b09a6","sha512":"b010ebc2b0f06f0c9547a6b27d53c8ef06a63520449c299dc9206b319081a15cbedf7dd1249e1bfeef5570806bd3b698eebf7a1e31066728614c6029633cf1d6","ssdeep":"","tlshash":"955144c972242a7637538055d19e4d117321b03ae438fe2e36dda1ed8fa99835829a33","size":2813,"data":"","first_seen":"2026-03-12T16:55:22.876186Z","last_seen":"2026-04-15T05:45:13.380429Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/home-87506211.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d712e767e3c0d7a822bb71d67ce3705e","sha1":"0a44a58e83fdc551200218f7bde60e87c277f69a","sha256":"a9d3a69be62287a2f374965222fe36327f5bba53476f692e82a3a5c9a31bd959","sha512":"5b3dca7b9641164e6b5bf076aa1f9089e82961eb73fc5c4c21423a0f8b5c2e16085cdf75042242156e36eeb61c51e6cd80d78912361077f62750b1af06e20415","ssdeep":"384:+POqo1Yg+ZEYKJmYyoLDpiS2L86DaiEkR64A/+r3RyL3C38su9INSAK6MjDX4syv:KOTR+ZEYKUF+piL86aeRe/+r3RyC38s/","tlshash":"1fa2fad9fd0ada3ab5b209944598000035141feee52181d1b5fd1e0a1febe7e13afb2a","size":22735,"data":"","first_seen":"2026-03-12T16:55:22.798104Z","last_seen":"2026-04-15T05:45:13.341339Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-25e9e0d3.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2a17a65675aae9c1402fa1dd8503ac6c","sha1":"2af0e6c7aae04538344e4846fcb14cfe677befb0","sha256":"ee425f7d56b3c1b5f4b1f7a0e87f2100fff5d820fb87f779c00aa3462c396517","sha512":"63efe203a698a4d4d2e12dc1a422ec0e3c99972e3f439151ac3c8e798a7cabcd37d0f7a8e3dca4973c7c5025b000caba735c3a3cbc74d4f88b3b5f0deaf0dcac","ssdeep":"","tlshash":"0241a4442268bab600c466d6c0968a405121002c590bc194b7fcb5e29faeacdceaf73a","size":1908,"data":"","first_seen":"2026-03-12T16:55:22.88049Z","last_seen":"2026-04-15T05:45:13.285313Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d513d59e.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0a5d9db5082a28e1785d86b2db2525d3","sha1":"b8d079af4f4d0222acd707b00a5d1ccb7fc21349","sha256":"55f165fabfe1eb657a50423ceaecdea5c9228aec554634823f4b0971bccbdc7f","sha512":"19fa56c806521e40de628f7e1b4c98748762d91c8ec32592eadb9021a437c867cb8b5e1374a3a8109baf153d9574c93153492b075842256bc4dd9cf46a703c76","ssdeep":"768:LnfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:m6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884acfb4da9d37f79e6a94bbf2c","size":29815,"data":"","first_seen":"2026-03-12T16:55:22.878363Z","last_seen":"2026-04-15T05:45:13.320307Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-60a89093.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0b9d0bca352e5221a19406ecf3d0910f","sha1":"7b8db0102584b40289de1c8c003219a13f5fc8a1","sha256":"1ec0d15d6e4db8c4e8aad4c4c73b17befe3c1961631b9bda39a3c42087267e68","sha512":"0dd5fb1b30a765748570d9309e8038286eb566dc00eeeeb7b8c0ea177cf475edbf9c494a6f39d642ff95eaf9ce4150ae06341893d1eceeae2943dd46ac583d06","ssdeep":"768:XCzlkEh6WjzDJ/NCYUV6Xi7QMR+gXPJjNHe7DGls4+DBL+FUytuLUed:Szl5h6kwViiPRFRjNHe3Glr+lKFDcX","tlshash":"14e2f7c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","size":33100,"data":"","first_seen":"2026-03-12T16:55:22.811651Z","last_seen":"2026-04-15T05:45:13.347632Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-c28c205a.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"40e152d7e754dc63fde36d1b623d9ce4","sha1":"fb8669015d6e5c3fc5094f46040cedf0f10865b9","sha256":"5a087037eee74c54ab329bad9bcf20e19e61e7298e9fa03b2aa7d6fcb377ea5c","sha512":"dbc3d1ca6bde2f174605de886ed7b4568d09628fcafe67fe0f353f935cb16e41caa68982f91e3236066f2b88c868dbb419a5a4d061db7f6c5fe5994e31cb2feb","ssdeep":"96:eo2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:32ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"03c144d5bdbd2e7b3517c028e16e86a4e334b0279424df3e77ac61f88f59942181c931","size":5676,"data":"","first_seen":"2026-03-12T16:55:22.817029Z","last_seen":"2026-04-15T05:45:13.336651Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/ref-3335a8aa.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c74c45c1bc4625c4b3614eb4c826dc20","sha1":"97fcd282303451b149ac68ca0d2b64758db0704e","sha256":"72d7bd1827c0c2feca9b6c730880c3d5151b39580ed02253fa6b4935669a9394","sha512":"d41e51ebd278c80ee41c96ca9f87302121a5435430de2b980ec7e60d1aa3cdb5d9a04f3a8a947c8da455d6960c14ff5a7e9c37bee13c01233cc17d14eb5835ca","ssdeep":"","tlshash":"3741f19773d801d212cac6e7fc37892af11131583a65845cb0ad6bf7e83068791bddb5","size":2156,"data":"","first_seen":"2026-03-12T16:55:22.859073Z","last_seen":"2026-04-15T05:45:13.366165Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/HelpersUtil-2286d400.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2577c54fa41a9dccc6706936ab629516","sha1":"d5105a9b203ee4b0cdc9069dd68b0544ba269bb9","sha256":"f6a93469ee23f561dd26bc93951d314f6a434acb3e9b817491ffb09bc86e262b","sha512":"eb1f2486d459eb023d8356c141554814aae7108d7c38a0fcb9c4f5d7ed3eb8f97e10c3d0f6b792af317d68e9b355411b19ac6981892d63bf01fb1bd3c97cb114","ssdeep":"","tlshash":"6c6145c5f3fe7e26350704a999adc5106336702a291e9f3e7bed53f84f0af81a856520","size":3196,"data":"","first_seen":"2026-03-12T16:55:22.832602Z","last_seen":"2026-04-15T05:45:13.296679Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/w3m-modal-b1ff8ef1.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"939d5ed7952354468d68c7d0ad95cb4c","sha1":"f402c7b845087dcb86479606875bb6d6bcece0e4","sha256":"100384b853afc98771bbceb371f77e3cc0bd4d8a601c8363d1ea31035ccf941c","sha512":"542ed5bb829766a962245b5b32cd1aa40caf5ef780a8c68ffb6de057601ed8acb566afe514bf8b68f358fcb716b45645d92806b31753c13b4dfdf6592aefa84c","ssdeep":"768:mBEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:iCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"ae2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec51d58fd498869bf735","size":46159,"data":"","first_seen":"2026-03-12T16:55:22.864975Z","last_seen":"2026-04-15T05:45:13.325582Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","size":1955,"data":"","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-07-01T21:00:47.72394Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/Home","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-07T05:09:01.797489Z","times_seen":7178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-e6521786.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2fbe582fe14006d7f683ecd82a35c824","sha1":"964aea3d211de25fc724b73dc6c70a544c9b7fed","sha256":"fc736fed8435ab7769dff3a886a179ee41dcc2616a1ed474469893a9f64b1f2c","sha512":"74efd46a634a762510df53544ac9fac88f97d9281e940f16c2dffbe40518c3aa29c2e18465731dc3063ea4c63ad409506979a885d5269b0a32110f162e35d1b8","ssdeep":"","tlshash":"3d81d95252bb9178a861d1e10fdf16842216943b5a18c47ebaca61f08fc72bc9839bb1","size":3883,"data":"","first_seen":"2026-03-12T16:55:22.851031Z","last_seen":"2026-04-15T05:45:13.330314Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/property-6708c68b.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","size":17735,"data":"","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-07-01T21:00:47.804729Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/send-e4234d39.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b0d2cd2bf6d091e7b13fc924369cca","sha1":"725001ffd2ec2989639a2c4dc36c656824eef75c","sha256":"a5e863d9306830012a0cc970d42c4cfa3c8108a9d4a0ba04221defcde4b97e87","sha512":"bbb82337a19f5c87de1e01bdf19b145c3dff823616d985f2dd67c7e5bffdd235ebe5242ba11f3316e6db5fca413734c7861c2b764a4b29344d7b794a2fe1cdef","ssdeep":"768:oaYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:zYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"03e2e89433fa281d29a7516dead69e006331501b811cc5fdfaeca2f18fa9e4248f7734","size":33591,"data":"","first_seen":"2026-03-12T16:55:22.815337Z","last_seen":"2026-04-15T05:45:13.312545Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html#/","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-07T05:09:01.797489Z","times_seen":7178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a9b5a56a.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"15be76634ddc9d89e12f0471155339c8","sha1":"19960fe52cbc474168b5988c1c9d297e0e49a541","sha256":"79793f4295cfc478fd637b15d8abba228aca5a352981efb88c20bfa1cb6ae805","sha512":"6324b3662800c0c39853e4334a01e8aba6d52c63707f3cfd11873fcace34e311f8e580ef6feea25a7e53a479fe766b891ec2649dac5396b900e44608bca2156e","ssdeep":"192:rDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:rDEIRRuUCL5dmVp","tlshash":"27e1b601ba296e3cf73b84582406529561d09f59ea30c2f6f3bc9b2266d5bf22f5db04","size":6947,"data":"","first_seen":"2026-03-12T16:55:22.830914Z","last_seen":"2026-04-15T05:45:13.277003Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","size":21919,"data":"","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-07-24T05:40:16.112458Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-5c39d86c.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"31defc23a8a751eb880853e554c09c0e","sha1":"86f03041519abcd79610a36d9f0ded8cced111c1","sha256":"2a714fe6cf782f103d614ef3279efb4aae1b9ba2f39eefb999b072e749babba6","sha512":"594bceb6eb2a4399c18ace486d020101d6b75f27654437227c0a140a3272df8ea3aa0b9b67a45b100fb3e3d2edb2d2c15cba86047f14f9ae923a8a2fc84b70ee","ssdeep":"48:qAhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:dCgEQM0o8hJwisSPjgZDIKL","tlshash":"d58116c57fa815e53713c060aa9e4c25e331a027a8299f6e7addb0f88f55643781d373","size":4166,"data":"","first_seen":"2026-03-12T16:55:22.828645Z","last_seen":"2026-04-15T05:45:13.358352Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-6c9cef39.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3dc3c4f44f473fb0a351fdb36531de8e","sha1":"57cce8b649feb62e9aff2d79818934d8f19e359a","sha256":"0681ad2b343ebadfe5203e239adc5fbbf0a8d2ef03c688bc0dc658e6b67456cb","sha512":"0c35fc6a6de7dd34c77ad9977eeb608caf90fc7cdaab09fd9168e412c05b4bd22318cc1be53e53a26ccbc7a3f34481b88738f424422674c83956cd00bea347a8","ssdeep":"96:U5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"f981c864b37d217a79c390588d366d01d334401ad11ec9a07bdca0a78faa2ca9db7771","size":4173,"data":"","first_seen":"2026-03-12T16:55:22.80659Z","last_seen":"2026-04-15T05:45:13.311649Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-908eaf68.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6a45e7de68b26701f37dc8ac7e2cf75a","sha1":"3977c612faf9663fdcc5eee807fca284fd9eaba1","sha256":"4416fcdc9f731a72fac68cc1b4f81d66839da5bd12ff93fdd69dc9e0dc96c595","sha512":"b168da57c881a2284952b719195857337bf4dfe63e18bb2382ae77cb5de2d1e6c23e214b0b5103bd911d018b3137d7869894349bff2c68d9a55b120e64876d71","ssdeep":"","tlshash":"a55197c1772b50b59107e0d40faacd000b2291279526cabfbddf71f58fae7496819332","size":3131,"data":"","first_seen":"2026-03-12T16:55:22.808918Z","last_seen":"2026-04-15T05:45:13.33511Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b7a416bb.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a304de782e3a1982407450b066fc8c8b","sha1":"651ed3180e6b7355d5330f81ef5976bbf8983c1b","sha256":"4e0d04746970c0922a7dd1da94db7a8abca6a52d27b964933cd46ec4e6094542","sha512":"4421f779724a80839930c82fab6341a9202076804a4c3dfb8ef5c88e42887c27df28581ee2655d708586e4e3f5a4a865083fd83b532207e6beeed1f79a45a1ef","ssdeep":"","tlshash":"2e81969ab7771864342b42a9fbde4b245232b05e0a1bdd75f3cc12d58f48a689b4b230","size":3966,"data":"","first_seen":"2026-03-12T16:55:22.821582Z","last_seen":"2026-04-15T05:45:13.269973Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9d24c88f.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c96bb322f6b946e216e9b7196dd940dd","sha1":"b4ba324d2c9e4b3310c3abfe32b3584e68a3838b","sha256":"748da57ce1edeaf713b242f2f378a28c3eda62c06b8afd5533342ba5e5d9f29b","sha512":"3b8a3f2471c58af71b87a85812c6f4d69f6dfd3f82e7a93cc16c77fc367b2e00d1d243fb38cf2aecec6fb5293c9802e56d95380077ad16fb7a805d0d034b16d6","ssdeep":"96:0jZJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0FJTFyhlqTsd9fTOsy6Xd","tlshash":"dca1a7a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fbd084d4df299","size":4963,"data":"","first_seen":"2026-03-12T16:55:22.863037Z","last_seen":"2026-04-15T05:45:13.346744Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","size":2110,"data":"","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-07-01T21:00:47.745625Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krakex3.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:52.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7832,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b5548cd3ef90fa3d6f3316065e6c3cce","sha1":"f4c4deb255494aa535aa701991c41f79a0307a83","sha256":"b142978cd7774885a600e57688ea575b7c69824de56cb704bb2dec1f052738a2","sha512":"c2958b9f23d0c6e78589348228cba2cb5cdc16886848f9a33dc31128a033da86fbc9b710f8aefaf7e37b3b41b89b76ae0f9115d6f981ba5145861355f026998e","ssdeep":"192:D/Adbywgbo7E/hKe+077R8sGnyzM3saxCUiC+cW:jCy4e+qR+yt6W","tlshash":"86f1d9142b614bafc525a0c21cd33bdc496f25a62cd61b52a1ff9d9e8308def3123726","first_seen":"2026-03-30T11:51:07.780328Z","last_seen":"2026-03-30T11:51:07.780328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b0558491.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:35.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-b0558491.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-31d37a\"\r\nexpires: Mon, 30 Mar 2026 23:50:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3265402,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a29a87727fd77ee05667b254325ed88b","sha1":"90e64f1a40bb11267a4f72fd9ddbaccc95686642","sha256":"1d5785cfb101193bf173315ae0ca84bf5b547f690454005ed3648a3fd621a5ae","sha512":"c63b4d9ab9580a125594b47aec11c1e56a19fb73eb979e4eb37572a8a11855fe55941b1d1d6202cfe428cc1c68d4550dd5461617e8bdeb5044f8f8168236538b","ssdeep":"24576:fzUmhCT1bqfFfIy2aB7UGo/PDXg0sw0ERirdxQR1lSVZWUnP:fzUmhCT1befIy2EUGo/PDXg0sw0ERirl","tlshash":"9d459e5866dc24ae0763854af0cb3605f1bc0cf6f59bc16159fc892e21f6859d2aeb3c","first_seen":"2026-03-30T11:51:07.782125Z","last_seen":"2026-03-30T11:51:07.782125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-ad0cf90b.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-ad0cf90b.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c1d\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"cda56e760bd25cfb758c254f2141c161","sha1":"1b0146e385cd09be690f8c1a7effe6addedb10a9","sha256":"99e8dc7c9dcd87b36f9295d175c89a4c762cd902b1901f7b4de4aeec121b24c6","sha512":"3eb32cca620e4e7da07411329fb966ccfecf48ff181f8a34d26a2f766c96a780bad617a2bacc3877d1e357650fc432290d4eb11f784d97a705a532479e486491","ssdeep":"","tlshash":"db516221f042ae3cf3b750652098784865410fa899646af7b1ee5e0f23d9d726b9f738","first_seen":"2026-03-12T16:55:22.842075Z","last_seen":"2026-04-15T05:45:13.308718Z","times_seen":7,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/receive-dd4142dc.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/receive-dd4142dc.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19dd\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"69cc40957c96ab75bdd1be0576655109","sha1":"c0f74683887b55a4b4a52ce1467b19f682d2f73a","sha256":"8bed1ea7bc1dcd8183178033558f3d3c6e26868fa66f9504eb73b89d5a7d22f4","sha512":"da807948303a1ca83afbb3e0f37128f5c123356a843d4d11f0183858273540d61a98db52685c47a9d8afae66d5117d4b89f080fa316acb48d7fffb699f828783","ssdeep":"192:XXIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:nd23vx30IXuTjmpqAY4c","tlshash":"06d1c64559b638adb812d0981e969a00c131404f9539c5fdfaec83e58fe968689ef722","first_seen":"2026-03-12T16:55:22.839211Z","last_seen":"2026-04-15T05:45:13.321757Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/HelpersUtil-2286d400.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/HelpersUtil-2286d400.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c7c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"2577c54fa41a9dccc6706936ab629516","sha1":"d5105a9b203ee4b0cdc9069dd68b0544ba269bb9","sha256":"f6a93469ee23f561dd26bc93951d314f6a434acb3e9b817491ffb09bc86e262b","sha512":"eb1f2486d459eb023d8356c141554814aae7108d7c38a0fcb9c4f5d7ed3eb8f97e10c3d0f6b792af317d68e9b355411b19ac6981892d63bf01fb1bd3c97cb114","ssdeep":"","tlshash":"6c6145c5f3fe7e26350704a999adc5106336702a291e9f3e7bed53f84f0af81a856520","first_seen":"2026-03-12T16:55:22.832602Z","last_seen":"2026-04-15T05:45:13.296679Z","times_seen":7,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3090\r\ncf-ray: 9e46e5d81ee72efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 71914\r\ncache-control: public, max-age=31536000\r\netag: \"cfmK10fIs0rtXK3D1w_qZdnstVfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=495+4 c=0+3 v=2026.3.3 l=3090 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8e093ad4a0e0bf420966897e5d52611","sha1":"90172a764ff649c9553d8e84ada46adcb73f33ed","sha256":"4a00efea74245ceacea37a3e83f0a4a2830236143357d3c57e96c4dd154d593f","sha512":"50b07fcc6d1c5460e69613f4509eb8323b11b6634ea8f268bf541eeec6271bfc5852200c34f385ad82d44c3e3f70122e783f1669d9d356d65be4ee82a20d6546","ssdeep":"","tlshash":"d7515d250e57bb7f0fa7793b2e97c313955320052e06b200b624f75101940863bf35da","first_seen":"2025-01-22T15:25:28.982905Z","last_seen":"2026-08-07T02:27:01.842293Z","times_seen":1258,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":34,"connect":3,"send":0,"wait":33,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bch.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bch.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /hGOfxFXSriMjxUJ5R/QO8rbSQraR07JBBwW4ePHpWlS4s5DS7k6ptochjGIMaJSRWCmGqhNqa+Hq7nKauM2RCtotFjpNDA3\r\nx-amz-request-id: NN0525WEN4YFZVNG\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:30:25 GMT\r\nETag: \"a62c25ec1acb1fc3718098578b388808\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1953\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62c25ec1acb1fc3718098578b388808","sha1":"5ca0181b69511c10a14f3927fec31a9ceb00f067","sha256":"d600c9ea66bcc09bb7c8462506b8946cf3afe92cb717ee86ee2d660a154653d7","sha512":"4fdc1adf49350c2f5362f58b469651a926221e7b642292f672a7bb25de1ed25a4e26c5b709fbc4232d3a03d9b19681a8e24b13d92a009b295f79231e3a90709d","ssdeep":"","tlshash":"ae412e60b3aa557df410d3f88a2da0b17e733c823c25d10e9af60929a66181da030cc7","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-24T06:14:46.339376Z","times_seen":278,"resource_available":false,"data":null}},"time_used":1557,"timings":{"blocked":622,"dns":37,"connect":280,"send":0,"wait":301,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-83e\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-07-01T21:00:47.745625Z","times_seen":28,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/property-6708c68b.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/PhQuestion-25ab6f67.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4547\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-07-01T21:00:47.804729Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\ncf-ray: 9e46e5d80eb52efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82604\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=10+3 c=0+2 v=2026.3.3 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-08-06T03:25:28.04094Z","times_seen":1455,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9e46e5d7ebceb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-08-07T02:27:01.932308Z","times_seen":829,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":114,"dns":34,"connect":1,"send":0,"wait":43,"receive":2,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: 9e46e5d7ebd2b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-08-07T02:27:01.964411Z","times_seen":793,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1aae9526.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-1aae9526.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-568\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"e35c6d2283184da2e2ee2f962d978617","sha1":"77642f77d797186b495e610e59ea15f9e8c0b170","sha256":"09dfaeb54ed325674968b34ba9e5c9053deb7de0675545af1a9c047e322c6712","sha512":"8c7a6804cbe68fe7a0a3f1a4a06a1ef242a4061e0c617c5c43ce2e037702099396d04d33df92b7483b16fc858d72b7d11a869a8660ae30ab0a5b933e27a0e014","ssdeep":"","tlshash":"642136881669d7f205859599c6e9ad028125051bcf28d0a173cce1dd5f6ddc4c5a6b33","first_seen":"2026-03-12T16:55:22.822404Z","last_seen":"2026-04-15T05:45:13.297627Z","times_seen":7,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1020\r\ncf-ray: 9e46e5d81ed92efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82522\r\ncache-control: public, max-age=31536000\r\netag: \"cflmU5jeS0gZTTUT6JXX89Y_wKfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=531+2 c=1+1 v=2026.3.3 l=1020 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d08a4e1724ddbbaf3ee6372a6cc5dca","sha1":"ae18af289498c86d780f29f792e5dd1576239c87","sha256":"d1839a6158939a008a3bed2480ae5fc4a3ccc818b0bad78375758b5da90ebdae","sha512":"fcd457f698b2328da1e36faa98f33e6c5932ee3e3038d64e1fcd49cd3592ec87c57f17c4b751e258a0f2b6abb645d1ef840c73ef6d1e2bf617319faf2369d6c5","ssdeep":"","tlshash":"da11a878a4171e44e1712f1699ee33e9dd263c5648dd8133f062e6904017847a2383df","first_seen":"2025-01-22T15:25:28.962767Z","last_seen":"2026-08-07T02:27:01.861668Z","times_seen":1291,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":31,"connect":6,"send":0,"wait":33,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9bBrbo27RLEKmAz7wqyCJKq+wzOUhazP1r8flSCmqPt0AM9lY4mm7Ik6w+3jkhe4LDVCdZbINuc+T9SH1rsvH1dIBLtbemT+\r\nx-amz-request-id: NN0C2DAMZHENZ6FV\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-07-28T06:18:25.071602Z","times_seen":420,"resource_available":false,"data":null}},"time_used":1494,"timings":{"blocked":1197,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/home-87506211.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/home-87506211.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-58cf\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22735,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"d712e767e3c0d7a822bb71d67ce3705e","sha1":"0a44a58e83fdc551200218f7bde60e87c277f69a","sha256":"a9d3a69be62287a2f374965222fe36327f5bba53476f692e82a3a5c9a31bd959","sha512":"5b3dca7b9641164e6b5bf076aa1f9089e82961eb73fc5c4c21423a0f8b5c2e16085cdf75042242156e36eeb61c51e6cd80d78912361077f62750b1af06e20415","ssdeep":"384:+POqo1Yg+ZEYKJmYyoLDpiS2L86DaiEkR64A/+r3RyL3C38su9INSAK6MjDX4syv:KOTR+ZEYKUF+piL86aeRe/+r3RyC38s/","tlshash":"1fa2fad9fd0ada3ab5b209944598000035141feee52181d1b5fd1e0a1febe7e13afb2a","first_seen":"2026-03-12T16:55:22.798104Z","last_seen":"2026-04-15T05:45:13.341339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9e46e5d80eca2efa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 16436\r\ncache-control: public, max-age=43200\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\nlast-modified: Mon, 30 Mar 2026 07:16:42 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"83c79e57023102c06f159dc38aa6576a","sha1":"666310869db97c815801ae3e09216d8582375c5a","sha256":"c08ccb5df5489ffe00b1fe96863426d7dcb96f199d7345bf74ec8498a85ab7a7","sha512":"9160eea47df5e0774bb3db22f1287e34e78d2f5bfc96e2e75f9a11671efcef4b686de7c9e1bb11e0f8ea6b39a23c5f5a8d0731404d7e52c15454d6aed83e16c1","ssdeep":"","tlshash":"8d51539e57809dab5f349788e14cf9dac83ed00786cc58ea64f2853440fe863b3119a6","first_seen":"2026-03-12T03:41:14.103704Z","last_seen":"2026-07-19T18:55:59.72297Z","times_seen":25,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":33,"connect":2,"send":0,"wait":93,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1buR/qjdrZUMhJ2q4k9y3ENjy6WR/rh4t+BN7H6OCOn/TYJQZGrvI4P8kGQcPTRrQqFZZhR05YKIZ3zenD2YbEsU5NpkwXHR\r\nx-amz-request-id: NN08T2WPHDH79JQQ\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.103616Z","times_seen":522,"resource_available":false,"data":null}},"time_used":1560,"timings":{"blocked":628,"dns":44,"connect":264,"send":0,"wait":290,"receive":1,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ada.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ada.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jpOHN/yrmLEFNy7j5XuqiwTzVTzTT5EYzQqPKOqizPFdXFlxl9Up51l648JZo9ZJwY80RNJ5kuLJdStfJER5Bf+W/nUAytam\r\nx-amz-request-id: NN0FBVAX5FPVABW5\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:08:07 GMT\r\nETag: \"958ad0ab023fedd13301398a46f0ea98\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6511\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"958ad0ab023fedd13301398a46f0ea98","sha1":"1f006086eb1afdeecc534e1f9990435502080c98","sha256":"2f91923ef20d262b5fc74abf33fdffb7888e7cbce646e0380122825cb872f410","sha512":"819afddd9ee026b64182974f5e80c349651953e593725109b1d723884f4bd463e83d8443a8a22ad1b9ed76dbff6456071d19c5ec2787b4673d9c7bc6da4389bc","ssdeep":"96:HEENXWNXq2E8vTAd/IOZVMa/zSdv/RPk9WUvykuM+Xw7zROT02yrnfqzE:jXW02ELNIOZSe2M+Xw7oPSqY","tlshash":"25d1735973faa3b8b001e7fe87a794617a4529e36912d574c3b60e00ea8503d4efa853","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-07-24T06:14:46.310488Z","times_seen":208,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a9b5a56a.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-a9b5a56a.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1b23\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"15be76634ddc9d89e12f0471155339c8","sha1":"19960fe52cbc474168b5988c1c9d297e0e49a541","sha256":"79793f4295cfc478fd637b15d8abba228aca5a352981efb88c20bfa1cb6ae805","sha512":"6324b3662800c0c39853e4334a01e8aba6d52c63707f3cfd11873fcace34e311f8e580ef6feea25a7e53a479fe766b891ec2649dac5396b900e44608bca2156e","ssdeep":"192:rDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:rDEIRRuUCL5dmVp","tlshash":"27e1b601ba296e3cf73b84582406529561d09f59ea30c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-03-12T16:55:22.830914Z","last_seen":"2026-04-15T05:45:13.277003Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/send-e4234d39.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/send-e4234d39.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-8337\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"44b0d2cd2bf6d091e7b13fc924369cca","sha1":"725001ffd2ec2989639a2c4dc36c656824eef75c","sha256":"a5e863d9306830012a0cc970d42c4cfa3c8108a9d4a0ba04221defcde4b97e87","sha512":"bbb82337a19f5c87de1e01bdf19b145c3dff823616d985f2dd67c7e5bffdd235ebe5242ba11f3316e6db5fca413734c7861c2b764a4b29344d7b794a2fe1cdef","ssdeep":"768:oaYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:zYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"03e2e89433fa281d29a7516dead69e006331501b811cc5fdfaeca2f18fa9e4248f7734","first_seen":"2026-03-12T16:55:22.815337Z","last_seen":"2026-04-15T05:45:13.312545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/if-defined-39ff01ec.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/if-defined-39ff01ec.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 161\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-a1\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3eaeda4a4879e8acad1735fb4ccddd26","sha1":"76bebef49b1e07d9e23f7986d5585aa5f68cf2f0","sha256":"e283c993d87fdea0d861cbbe0f8d02c57ef0b02b6ccc41ac5acaad8589bd7858","sha512":"f332fc370abf5c75fc6637fc1c35e2875dae57cf0c777d829757045d6232ffb41bb0c6b8b52610ea43f08dac2fe5f21a1440e8df99bcfbe12a46b8841676e6b0","ssdeep":"","tlshash":"20c08c12a82901e34cda038ee864cd4e5020326e5f524282b0a8234688321805a9ec16","first_seen":"2026-03-12T16:55:22.81621Z","last_seen":"2026-04-15T05:45:13.309752Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-c24422b6.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-c24422b6.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c03\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"62c5cce2d8883f65cb2bb22412ad4452","sha1":"701a9c740954d6e33658fdc7bdd24dca5f9aa14e","sha256":"2c00853f4d1bbf86ac33682faaacb87d60fed67ba4ffe78305ed41dd497a422e","sha512":"687e8931ac7e355e7460dbaaa828e09ed28aa9c624e03975fd52e13b31021681ad8210ee294dd957f83f50d005cee5143d4be2993475f2fdb652d4fe1868cef5","ssdeep":"","tlshash":"fb5196d0bbf7797d65328029a4aa9c104322c007d378cbb9facda2f64f9964154e3376","first_seen":"2026-03-12T16:55:22.804223Z","last_seen":"2026-04-15T05:45:13.286903Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/SwapController-32be55a1.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/SwapController-32be55a1.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-35f8\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"27174423065a5660bb1fef9d0b994425","sha1":"ca09f76058db9c415401a7b0926d808111c87213","sha256":"8fc76e2362edf3ab52ddfbe58d162f85db5558ad6e46165e410984cd80f9a060","sha512":"a37588f0e3bd281d08df9b5fed49f842293d3757daa692c25f4a2a926d91e564e87af8e4c069b982c84421c3130a4c331684b8922a3c082f4650d28cf8669556","ssdeep":"384:Nd0FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:/0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"595264a27360b676471e729879f9131025221cd4e86ef4ece8ad05e30ff159f1eeb921","first_seen":"2026-03-12T16:55:22.800162Z","last_seen":"2026-04-15T05:45:13.299618Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-4b7f89b5.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-4b7f89b5.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-afd\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"a86e0f0ee2c1c7befb74cc5f4a84bf45","sha1":"3d588157398156805196a7d092edd30967308fca","sha256":"156156a0f7ba3c3a1c11b6950cfe15daa40de2351a65d53e3db60333e79b09a6","sha512":"b010ebc2b0f06f0c9547a6b27d53c8ef06a63520449c299dc9206b319081a15cbedf7dd1249e1bfeef5570806bd3b698eebf7a1e31066728614c6029633cf1d6","ssdeep":"","tlshash":"955144c972242a7637538055d19e4d117321b03ae438fe2e36dda1ed8fa99835829a33","first_seen":"2026-03-12T16:55:22.876186Z","last_seen":"2026-04-15T05:45:13.380429Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9e46e5d7ebe3b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-08-07T02:27:01.956963Z","times_seen":787,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":114,"dns":30,"connect":1,"send":0,"wait":40,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: 9e46e5d80c19b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-08-07T02:27:01.963712Z","times_seen":792,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":127,"dns":30,"connect":12,"send":0,"wait":44,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-559f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-07-24T05:40:16.112458Z","times_seen":52,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b74b5775.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-b74b5775.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-628\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"7feb369b0717ed940fc77726cb756fac","sha1":"039b1a4bb6172960d9d30cfcbfbdcee84ce7ebb5","sha256":"9d048059a94ebe46312c6f775581f0cfaf60d3107010b3841af248ccce58e6d9","sha512":"4d920161c3df1bfd7fcbbc6065b3d9c817fb75a19ec47c56690219ff1d42ac7b20563d761bde3e3e522c2c212a8d69a2bf44c55191d607da3d9a2e2160ef7ca3","ssdeep":"","tlshash":"cf319585637a24a424a3d0e50269da201235642a921fca7cb2fe71f08f7d4c0653b712","first_seen":"2026-03-12T16:55:22.799237Z","last_seen":"2026-04-15T05:45:13.357332Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: s9OxclaBA9Qvs/frzZtGtZ2Caz568N5CB8bFHcvzcNVxCHz+H6qchPNZhVWHKgWcmzNmG7TjZsnmlDZf/qOCyiMr0xBnvc9s\r\nx-amz-request-id: NN0E9M64AE5ENKWC\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-07-18T07:25:40.631089Z","times_seen":602,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":907,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/property-6708c68b.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4547\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-07-01T21:00:47.804729Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-6c9cef39.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-6c9cef39.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-104d\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"3dc3c4f44f473fb0a351fdb36531de8e","sha1":"57cce8b649feb62e9aff2d79818934d8f19e359a","sha256":"0681ad2b343ebadfe5203e239adc5fbbf0a8d2ef03c688bc0dc658e6b67456cb","sha512":"0c35fc6a6de7dd34c77ad9977eeb608caf90fc7cdaab09fd9168e412c05b4bd22318cc1be53e53a26ccbc7a3f34481b88738f424422674c83956cd00bea347a8","ssdeep":"96:U5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"f981c864b37d217a79c390588d366d01d334401ad11ec9a07bdca0a78faa2ca9db7771","first_seen":"2026-03-12T16:55:22.80659Z","last_seen":"2026-04-15T05:45:13.311649Z","times_seen":7,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/receive-dd4142dc.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/receive-dd4142dc.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19dd\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"69cc40957c96ab75bdd1be0576655109","sha1":"c0f74683887b55a4b4a52ce1467b19f682d2f73a","sha256":"8bed1ea7bc1dcd8183178033558f3d3c6e26868fa66f9504eb73b89d5a7d22f4","sha512":"da807948303a1ca83afbb3e0f37128f5c123356a843d4d11f0183858273540d61a98db52685c47a9d8afae66d5117d4b89f080fa316acb48d7fffb699f828783","ssdeep":"192:XXIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:nd23vx30IXuTjmpqAY4c","tlshash":"06d1c64559b638adb812d0981e969a00c131404f9539c5fdfaec83e58fe968689ef722","first_seen":"2026-03-12T16:55:22.839211Z","last_seen":"2026-04-15T05:45:13.321757Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b74b5775.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-b74b5775.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-628\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"7feb369b0717ed940fc77726cb756fac","sha1":"039b1a4bb6172960d9d30cfcbfbdcee84ce7ebb5","sha256":"9d048059a94ebe46312c6f775581f0cfaf60d3107010b3841af248ccce58e6d9","sha512":"4d920161c3df1bfd7fcbbc6065b3d9c817fb75a19ec47c56690219ff1d42ac7b20563d761bde3e3e522c2c212a8d69a2bf44c55191d607da3d9a2e2160ef7ca3","ssdeep":"","tlshash":"cf319585637a24a424a3d0e50269da201235642a921fca7cb2fe71f08f7d4c0653b712","first_seen":"2026-03-12T16:55:22.799237Z","last_seen":"2026-04-15T05:45:13.357332Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-8e60d136.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-8e60d136.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4f6\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"64e87bcb6c2688f973f5ae740a407f74","sha1":"de592c129157d3cdc56d8d60eb5f363fc4545f73","sha256":"3161d739b5ddefe4b38ffb35b5443064de5a6080b5bc22045521b6df70438dcc","sha512":"56703fbc95be389a33a6dad1b1ce85c0043a7974f780d32456b7f750046f34082ed4fa95ed9c1ac2227734f2f54b5cea36c191b8d44bc71f0e8b17dc7dd44a15","ssdeep":"","tlshash":"aa21658417bb7295b5576189463c4b06d23240539a1ccf3d73dd76e48f5c1c988bb324","first_seen":"2026-03-12T16:55:22.846803Z","last_seen":"2026-04-15T05:45:13.383855Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7846,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"60cb19ce1cd86e46dceaa6d45a3b7ba1","sha1":"5383b6c31dd9cfad1830acd8aac960e397794f41","sha256":"cd1b5108e2b203a1c83546ad810b95bf170f363d1ed0277300b19ce95e485c64","sha512":"220bf75d3aa74e938e35cbb4ce5e07d2ef0d53a164267c5739e0c118f83f66fa2b73bad7200acddb0401b6f7e4d5a2bc82a4c0649ecc41b785d53930cb514fbd","ssdeep":"192:DMdKb9mgL5hEVnJxV4JGt7FbUR/xZviWIUF:wS92VJfJgb","tlshash":"b7f1db156b714bafc525a0c21cd23bdc486f25a62cd60b42a1fe9d9e8314dee3123726","first_seen":"2026-03-30T11:51:07.83508Z","last_seen":"2026-03-30T11:51:07.83508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d513d59e.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-d513d59e.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/receive-dd4142dc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7477\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"0a5d9db5082a28e1785d86b2db2525d3","sha1":"b8d079af4f4d0222acd707b00a5d1ccb7fc21349","sha256":"55f165fabfe1eb657a50423ceaecdea5c9228aec554634823f4b0971bccbdc7f","sha512":"19fa56c806521e40de628f7e1b4c98748762d91c8ec32592eadb9021a437c867cb8b5e1374a3a8109baf153d9574c93153492b075842256bc4dd9cf46a703c76","ssdeep":"768:LnfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:m6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884acfb4da9d37f79e6a94bbf2c","first_seen":"2026-03-12T16:55:22.878363Z","last_seen":"2026-04-15T05:45:13.320307Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800, s-maxage=900\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e46e5d81ee52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d624ae72d5da08a9698cf19ed1004a52","sha1":"d2da4fc91b5567dfa523c551f8b8501b43d0384a","sha256":"68df83e68b02e91713d9e5b52a22c297d98ec2d5acda0c37cb47162547cf35db","sha512":"90aa31b4915827753f86420e7b64e4f7685df1bf06908974128eb66b8699e549781120077589005dc68e9fd726c8904fb322695755e997ba1dd28a0b90e77d58","ssdeep":"","tlshash":"9a90020520487596c052c631c21157075d258e732d1460345025090990bb4750841823","first_seen":"2024-07-15T21:15:20Z","last_seen":"2026-08-06T09:19:02.666679Z","times_seen":709,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":37,"connect":3,"send":0,"wait":210,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bsv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bsv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: f3Z2l4JFgiqz7XEVjse3APUyUTe/W9BATmz66+xIm0C/awIouARgxquDKyKP9n1jibD9YvaNxnp9FAFIrnFNaNQrBP6psMCB\r\nx-amz-request-id: NN02SVRMGRXCJR7B\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:36:30 GMT\r\nETag: \"0a6c14a948ec11e6b3bc19ae2aed7c22\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1817\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a6c14a948ec11e6b3bc19ae2aed7c22","sha1":"0f79ca42c47a7a37253f23b608fcfbc2493dd84b","sha256":"fdb30ade7093c96b4c5968e4a3721388c3be1e0325266645f40a995d8667486c","sha512":"3d6acc8ed9dae0981c23574fb5319dc64591b22082392253e9da74f64832f45cafd2db8a652d40478edbf2752c22576938acd4757d6ce293c34653b4e79e8233","ssdeep":"","tlshash":"78312555a370f368b904b3f8d36494b1752664fbb253d50896fe2125fb4881e0cfb98b","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-07-24T06:14:46.405917Z","times_seen":367,"resource_available":false,"data":null}},"time_used":1563,"timings":{"blocked":623,"dns":46,"connect":277,"send":0,"wait":299,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-83e\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-07-01T21:00:47.745625Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-0944fcc2.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-0944fcc2.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19ab\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"b32e02ff4612b55b84ae058268999916","sha1":"fad1adda138cdd7a63f8b54fc5576a0b2c4de283","sha256":"56a4f536e7bac1aabea2a016ff2595143fde4eafdc144794c87b3b7627d094a9","sha512":"0158731a385a91437b2954c923e2ba10addba9667c668ee7cac6b0bf040218d12fdd15d274aeea7f3128c8684fde19b4cfdf7da08d1f2463db9e837ecf01d7a7","ssdeep":"96:wZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:wZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"ded1b5bf3d666415a632c0a58b928c04d131901757088c79b7fd19a8cfcea89766f764","first_seen":"2026-03-12T16:55:22.837675Z","last_seen":"2026-04-15T05:45:13.382489Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9e46e5d7ebd6b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-08-07T02:27:01.841216Z","times_seen":829,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":115,"dns":35,"connect":1,"send":0,"wait":37,"receive":2,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-908eaf68.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-908eaf68.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c3b\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"6a45e7de68b26701f37dc8ac7e2cf75a","sha1":"3977c612faf9663fdcc5eee807fca284fd9eaba1","sha256":"4416fcdc9f731a72fac68cc1b4f81d66839da5bd12ff93fdd69dc9e0dc96c595","sha512":"b168da57c881a2284952b719195857337bf4dfe63e18bb2382ae77cb5de2d1e6c23e214b0b5103bd911d018b3137d7869894349bff2c68d9a55b120e64876d71","ssdeep":"","tlshash":"a55197c1772b50b59107e0d40faacd000b2291279526cabfbddf71f58fae7496819332","first_seen":"2026-03-12T16:55:22.808918Z","last_seen":"2026-04-15T05:45:13.33511Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9e1633c8.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-9e1633c8.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9cf\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"f672dbeab2a79f477b63594fa5edb68f","sha1":"ce196a3702377e096b4681df1e2f7fa2c1f8a220","sha256":"92dc11e4d87dd1f996a4ef6906ba9957b4d852c53deca6368fe31f3289e2722e","sha512":"84a9780466f75eaf8274eab8307b6e1755fdaf43b08f844b7fe96597f04d59ec3d1eabd29ba638c33898e8d44d79859b3a8750dcfec241173c32dd561a654e6e","ssdeep":"","tlshash":"c9512e85b213a8f7386261f9069f9315662438120aacd62878dca596cfce7efa434123","first_seen":"2026-03-12T16:55:22.860481Z","last_seen":"2026-04-15T05:45:13.28835Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-49d29c21.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-49d29c21.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-38263\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"d638dbc28c50dff4faed1ae0eb44709e","sha1":"fdb393477c3e25b2a826037cc1357fbb8b85d5b5","sha256":"8fef8e5c0bead675652fc0aad7c900dc5fa8a1d5a716facd2be3c8f373be5a40","sha512":"19abfad261a6b61b7d53d5f3e053c2b1af6a30cce047c6c3efe6254e1e737f1d9da2601dd71207cbfa4336d0fceaf0b1df3156fdbb49c0020c2e6f5540bff8ff","ssdeep":"3072:G5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:riZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"c324f8546bb069186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-03-12T16:55:22.847583Z","last_seen":"2026-04-15T05:45:13.355342Z","times_seen":7,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-6857c7ca.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-6857c7ca.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bdc\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"861c6afe3395c6a9378ea840dead57f1","sha1":"cafb73158459679a27d00e420c15c65bab9335e9","sha256":"4645a9a90ce3679e043ce519f5eaa0092397bc7acf57eeedb4d225bf8863877b","sha512":"ab76ec9a16f5adf8de00af6c2674f0b0716d80d6f8cb582a23231cec865c0d30fe7810d5fba313d65238cd473589b10559dc60846459cbe79da430a3cda1d309","ssdeep":"","tlshash":"30515484a6a6581e520790adc7bf4c01973ae41fd029cafeb6dc90f54fba98115ba331","first_seen":"2026-03-12T16:55:22.801817Z","last_seen":"2026-04-15T05:45:13.3107Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bone.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bone.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: KehKnaRxEFZR7/jU1V1bUwFT4pETQg1AtNpFS84mqEjCY+29dMWrGindY3iVp12d6oHy2Ws0dVh5t6kTG5I4sIds5f7hm+HU\r\nx-amz-request-id: NN00QCZ62K8BF8NA\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Thu, 05 Jan 2023 05:37:41 GMT\r\nETag: \"3c335279a6cf73c3947a05b71e83ba1d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 53957\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":53957,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c335279a6cf73c3947a05b71e83ba1d","sha1":"b59ad0c11cec77b11ce7b08ac3f244e84c2ec0d5","sha256":"083b7872dce2acdfb2dbc4bbef367d7545e5331ddd0d4dbe86c50d770e2b776e","sha512":"0b00f82985185f1577f14be2e3cea878ad7e8c7ad03e51a2356304aa1816ef61e6d4c067a2becfab32cb11d8ce531a5519714fd178610ea7d598bbe97ae8e5a2","ssdeep":"768:4QIFYPg2OHJMDmqsgVnRd4sSUT0A40ZK4lkULDR5Cf0PNsUaqqvavAbItNsELv6:Mkg2OHoVdH2swA4Y3ZVsUaqmaobI0Em","tlshash":"b333f19b0e3f32bf0c35391a51fe22570b5f2c9c925886dc5a089949721bb243b3866e","first_seen":"2025-07-05T16:42:06.938712Z","last_seen":"2026-07-24T06:14:46.364104Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1763,"timings":{"blocked":1207,"dns":0,"connect":0,"send":0,"wait":289,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T11:50:34.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:34 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Mar 2026 22:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4727-2a26\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a94cf09d11d3bcab3ca6d961167e5d42","sha1":"05038eeab9c8fe632402cdd0617983a80092750f","sha256":"f575362fb161a660ee78538b8fccc9bf7b459f5b36d7ba87ad2c6db2537d6188","sha512":"13130ff2cbf4d2da55dec18421908fc0c0b1ee5d6b992c133e0a206b44c8f4acb9e60fcd3a325650f9bbfeea8c7548f8f814d8dd827ee02ce6d5b1496b42b486","ssdeep":"192:vS6WuJz9Cc5T+KeP5VPkLrhkohUxSPNS6J1Dg6VEHnhZBt9HLtm9hafUCzCSDKCB:vS6DT28HJtUdrtmja8ItTEaIARgvY/","tlshash":"b1225367a8e300596457a2641ffb332d3635900b7746cda83f9d2ba48f83f858453bd9","first_seen":"2025-11-24T21:16:20.874299Z","last_seen":"2026-07-24T05:40:16.109893Z","times_seen":48,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":182,"dns":0,"connect":87,"send":0,"wait":87,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/v1/api/pay/getCurrencyRate","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /v1/api/pay/getCurrencyRate HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 96\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbfdaaa7100b4e691d49f99dd404a433","sha1":"65ae57beb3a7650b64a04d65c078984405adfb03","sha256":"b74bd39dccf7209d1eccffa6164311066f34bfa5fd1b4d2bb79a289dc1465b38","sha512":"91bc789181df1db397be9c8caf63cd632d038d7803b3d1389eff5b7b11beff089e6cf0c7c39bfa59782cf7a42765ab628f6d023078177d70dfe2a06704ef842a","ssdeep":"","tlshash":"acb01289ed9990e2d411d112419dffd5596830a386c0033094dc57189695561f042426","first_seen":"2026-03-30T11:51:07.844193Z","last_seen":"2026-03-30T11:51:07.844193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-fc6d5a31.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-fc6d5a31.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1008\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"3e1006835216683dc17e7b93a2b97ad8","sha1":"c486940c30ff8b9f716697ac8da66ae85be7be7b","sha256":"2cd22ea99865c65f65fc2aa037057dd1809df32cc0c6eaa9bfa937be197bcd5b","sha512":"476eff1023d4174f2900ac7a40a1b3598feaa34e5d50369adb226e7c66cfbab81dd7aa77f07ab2a9bbe29f138ef8f0314fb17a213422f94c94f669e8e0d1fd5e","ssdeep":"96:1JPHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1VHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"1881c5857330d912251e8a6867fb8206373a50274225c4fcb6cd9af84fbfe459b75b70","first_seen":"2026-03-12T16:55:22.824614Z","last_seen":"2026-04-15T05:45:13.298616Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: 9e46e5d7fbffb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-08-07T02:27:01.962929Z","times_seen":791,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":120,"dns":29,"connect":12,"send":0,"wait":37,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9e46e5d80ebe2efa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 5067\r\ncache-control: public, max-age=43200\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\nlast-modified: Mon, 30 Mar 2026 10:26:10 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbf39dceeefd4e7b837a0d5954c94910","sha1":"4853dffc66c53275b73fb2219ed5723a5d6831d6","sha256":"1627d4121b7cb00b96ee320b37893b30d6e0a2e89f93a21bc43522e9599b6bbb","sha512":"86fe88adca5689e8c3ceeadbdb61ae7ab42c6ced4756256d278f0d151977ddcd3c1f9b5b1444a87fcf258602d04b866136aa339d83f4342dae002de9eccdeb0f","ssdeep":"","tlshash":"5290025138485e1cdb491c59f04a7a52604c149324100f7590c05b0446a44361700474","first_seen":"2025-04-08T11:31:59.266604Z","last_seen":"2026-08-06T03:25:27.976673Z","times_seen":106,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-ad8\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-07-01T21:00:47.792187Z","times_seen":28,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/v1/api/config/platformConfig","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:36.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47e8ad08ec6865a5d9b55a022d4724ee","sha1":"2a758cc2273953c08589e813327c7e422f1bd7c1","sha256":"d340b8cc81e59b2ef218fe99302dc4b780deaa7110e368e73cc3c9ea79435284","sha512":"f8fa9c25345f6c649cbdb1365de467da36cc1da0dc4a546d0dfbf2eb44f127c68d96d259234b7963a6dcbefb27c6ad5b986c32bf231abbac05f44f0c913c992e","ssdeep":"","tlshash":"1a8151ce772a95b8c6e415cbd4c628190f79a9d66844f44fc29bec683ee78d13128217","first_seen":"2026-03-30T11:51:07.848134Z","last_seen":"2026-03-30T11:51:07.848134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/SwapController-32be55a1.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/SwapController-32be55a1.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-35f8\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"27174423065a5660bb1fef9d0b994425","sha1":"ca09f76058db9c415401a7b0926d808111c87213","sha256":"8fc76e2362edf3ab52ddfbe58d162f85db5558ad6e46165e410984cd80f9a060","sha512":"a37588f0e3bd281d08df9b5fed49f842293d3757daa692c25f4a2a926d91e564e87af8e4c069b982c84421c3130a4c331684b8922a3c082f4650d28cf8669556","ssdeep":"384:Nd0FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:/0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"595264a27360b676471e729879f9131025221cd4e86ef4ece8ad05e30ff159f1eeb921","first_seen":"2026-03-12T16:55:22.800162Z","last_seen":"2026-04-15T05:45:13.299618Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-7cf1ad98.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-7cf1ad98.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-18a9\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"69386e19d1259595921129156676e7eb","sha1":"57b44a4c9162e3bc65a45d86cad67af07998b0b9","sha256":"4f18a271ad4bd5e36ae65ad8941a7d278baac94681964b6575ae3a6a7a05ec33","sha512":"bf6b0c740470e63a2457dd8362a352cf4fd5ccde66a1fd8496fa50e400cb4bd06d24155a8db87f362b321ecf40288d744041d532db3c512950e4fa6a84fb7351","ssdeep":"96:Fi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Fi0K9+N+DF5si6SJHG","tlshash":"6bd12fd13e756e041523c939a7ae9d49e331a037c83989be77cc91e08f9da405aadb31","first_seen":"2026-03-12T16:55:22.843738Z","last_seen":"2026-04-15T05:45:13.368187Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d0518d72.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-d0518d72.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-12eb\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"3bd90731de83d6c59f377ef197bd6244","sha1":"e59af6e2d099541b9be9f6e525083256f4bcf1f5","sha256":"c6c6b988b51d40d0a6ef246c47bfb5dcf408448620ccf3e11eaf944ae978a0b5","sha512":"67b5b7f5fdc9b6f35a58e35a9b2f3972903654d3edceebf8daba0d0d2b01609f78e734f699497dd2f62d8d9b00f2296b1dda51cfc0e203a278b493c949ce8c23","ssdeep":"96:GdhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GdhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"d3a1c7f77167e7e0951747f5ccf73811611b3cb6bb064e0aa58ceac8de16184868ce10","first_seen":"2026-03-12T16:55:22.834443Z","last_seen":"2026-04-15T05:45:13.329394Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-25e9e0d3.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-25e9e0d3.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-774\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"2a17a65675aae9c1402fa1dd8503ac6c","sha1":"2af0e6c7aae04538344e4846fcb14cfe677befb0","sha256":"ee425f7d56b3c1b5f4b1f7a0e87f2100fff5d820fb87f779c00aa3462c396517","sha512":"63efe203a698a4d4d2e12dc1a422ec0e3c99972e3f439151ac3c8e798a7cabcd37d0f7a8e3dca4973c7c5025b000caba735c3a3cbc74d4f88b3b5f0deaf0dcac","ssdeep":"","tlshash":"0241a4442268bab600c466d6c0968a405121002c590bc194b7fcb5e29faeacdceaf73a","first_seen":"2026-03-12T16:55:22.88049Z","last_seen":"2026-04-15T05:45:13.285313Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-ad8\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-07-01T21:00:47.792187Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/index-a167d81f.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:35.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/index-a167d81f.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-5008e\"\r\nexpires: Mon, 30 Mar 2026 23:50:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2d09189a49549645194cf0b3b99fb96","sha1":"6938d2e35b3c9cb35ac93380d467c456107b57ad","sha256":"a167d81f47a399c1b5d31c91b3ed423e76f169d53319cfa73824284309d3ba67","sha512":"e23dc771ace21aed0d2a95e8b6f8e8bb365ef088a4481dc8df083954b38aa2ad519a39d94c720b477a9c4fc124d1021b1bc1b0923c70bab5eecc540cd853da33","ssdeep":"1536:OFsJM2FDrx3WqyrtpqoSWEDZsIyNBi3MFYaQj73rx3WqyrtpqoSWEDZtKCE0Zz1V:O0DrxmNH9yDuN0rxmNH9yD+Gfj0+","tlshash":"5b64c36aa690527cbf17faa497ce96d8f23ce5b2dd01dae8f10051184fc3bf50663606","first_seen":"2026-02-04T16:46:53.775438Z","last_seen":"2026-07-01T21:00:47.746721Z","times_seen":24,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/index-64018b0e.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/index-64018b0e.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-108e\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4237)","md5":"3c684af8b172bbf98c9863dd2dc7db9d","sha1":"f4d6852ce2e2c7aaecb3b7adf9307a836822b2b2","sha256":"64018b0e7980220a7dab8725807c61cddc279c9cd2b2b99e52b8a30dd18ea7de","sha512":"fbd99a64c8fd263ac3484229eddce1ccf7a6627eae44f99318d0588132f8eeb196487a4b97de590f591991becd18e48e46b64302bdbf73e22930ab479dd539cc","ssdeep":"48:FlF1D0mm2g1lMQE2imldovbJevkdFGVRIR8/FsvrS5eR6YShFQCGvRjVjmrT3xYj:7t5dFS24F3526Y1CQ7jgThYcfhKn","tlshash":"1591cc3bb18df6086077db91f3d17688925de523a2c569fa540c286dcfc3e8127b1369","first_seen":"2025-12-10T07:39:13.865038Z","last_seen":"2026-07-24T05:40:16.112977Z","times_seen":52,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-c24422b6.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-c24422b6.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c03\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"62c5cce2d8883f65cb2bb22412ad4452","sha1":"701a9c740954d6e33658fdc7bdd24dca5f9aa14e","sha256":"2c00853f4d1bbf86ac33682faaacb87d60fed67ba4ffe78305ed41dd497a422e","sha512":"687e8931ac7e355e7460dbaaa828e09ed28aa9c624e03975fd52e13b31021681ad8210ee294dd957f83f50d005cee5143d4be2993475f2fdb652d4fe1868cef5","ssdeep":"","tlshash":"fb5196d0bbf7797d65328029a4aa9c104322c007d378cbb9facda2f64f9964154e3376","first_seen":"2026-03-12T16:55:22.804223Z","last_seen":"2026-04-15T05:45:13.286903Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a1ade1fc.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-a1ade1fc.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-42e1\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"afbd5b4f8e7f8b2912972faea3330203","sha1":"7f14c7ce2c7d70e5dd677a5faf04d1a57dce0553","sha256":"08c1d3313dd2f22dd0a9dac24efd7cc641e2ab3e0a38378ab2e15f358f5aed21","sha512":"95c04b7b6bf21ea096f5ec6c16d01a33e563c1e05315709393b25feffa6bc62b32d524756c5b315fcee364bb2c6026f6a4f842e884ae1ec6cc482d075646112a","ssdeep":"192:QBhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:Q0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"1672a7ac3693bb28a9875bec26f55150f6343812442ed5bdb6ddc3e28f16a844cb2371","first_seen":"2026-03-12T16:55:22.825409Z","last_seen":"2026-04-15T05:45:13.379612Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-5c39d86c.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-5c39d86c.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1046\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"31defc23a8a751eb880853e554c09c0e","sha1":"86f03041519abcd79610a36d9f0ded8cced111c1","sha256":"2a714fe6cf782f103d614ef3279efb4aae1b9ba2f39eefb999b072e749babba6","sha512":"594bceb6eb2a4399c18ace486d020101d6b75f27654437227c0a140a3272df8ea3aa0b9b67a45b100fb3e3d2edb2d2c15cba86047f14f9ae923a8a2fc84b70ee","ssdeep":"48:qAhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:dCgEQM0o8hJwisSPjgZDIKL","tlshash":"d58116c57fa815e53713c060aa9e4c25e331a027a8299f6e7addb0f88f55643781d373","first_seen":"2026-03-12T16:55:22.828645Z","last_seen":"2026-04-15T05:45:13.358352Z","times_seen":7,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-8e60d136.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-8e60d136.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4f6\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"64e87bcb6c2688f973f5ae740a407f74","sha1":"de592c129157d3cdc56d8d60eb5f363fc4545f73","sha256":"3161d739b5ddefe4b38ffb35b5443064de5a6080b5bc22045521b6df70438dcc","sha512":"56703fbc95be389a33a6dad1b1ce85c0043a7974f780d32456b7f750046f34082ed4fa95ed9c1ac2227734f2f54b5cea36c191b8d44bc71f0e8b17dc7dd44a15","ssdeep":"","tlshash":"aa21658417bb7295b5576189463c4b06d23240539a1ccf3d73dd76e48f5c1c988bb324","first_seen":"2026-03-12T16:55:22.846803Z","last_seen":"2026-04-15T05:45:13.383855Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b7a416bb.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-b7a416bb.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f7e\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"a304de782e3a1982407450b066fc8c8b","sha1":"651ed3180e6b7355d5330f81ef5976bbf8983c1b","sha256":"4e0d04746970c0922a7dd1da94db7a8abca6a52d27b964933cd46ec4e6094542","sha512":"4421f779724a80839930c82fab6341a9202076804a4c3dfb8ef5c88e42887c27df28581ee2655d708586e4e3f5a4a865083fd83b532207e6beeed1f79a45a1ef","ssdeep":"","tlshash":"2e81969ab7771864342b42a9fbde4b245232b05e0a1bdd75f3cc12d58f48a689b4b230","first_seen":"2026-03-12T16:55:22.821582Z","last_seen":"2026-04-15T05:45:13.269973Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-7cf1ad98.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-7cf1ad98.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-18a9\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"69386e19d1259595921129156676e7eb","sha1":"57b44a4c9162e3bc65a45d86cad67af07998b0b9","sha256":"4f18a271ad4bd5e36ae65ad8941a7d278baac94681964b6575ae3a6a7a05ec33","sha512":"bf6b0c740470e63a2457dd8362a352cf4fd5ccde66a1fd8496fa50e400cb4bd06d24155a8db87f362b321ecf40288d744041d532db3c512950e4fa6a84fb7351","ssdeep":"96:Fi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Fi0K9+N+DF5si6SJHG","tlshash":"6bd12fd13e756e041523c939a7ae9d49e331a037c83989be77cc91e08f9da405aadb31","first_seen":"2026-03-12T16:55:22.843738Z","last_seen":"2026-04-15T05:45:13.368187Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1107c1b3.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-1107c1b3.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bcf\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"6510b61fb435b11e269b698dbf41a2a5","sha1":"d4484c8f930015cf050f7f8fc3429eb2878e4284","sha256":"fdec41b69bcf830b6339ba7062b12ae3064ce044a475e2de2cae3fcfe37e78c0","sha512":"e40fdb466a63aad6a911a28ec628f818e81a969a319482c1a120e6db9a5198a3b41cb51cebf4c7072b0070ce4f05f2c6984ed35e8d7162ea1d34fae4325baa17","ssdeep":"","tlshash":"9951b8d7b33a1176385592941eae4ee05233e01ba11cde3ebbcea1f84f461855c36632","first_seen":"2026-03-12T16:55:22.801034Z","last_seen":"2026-04-15T05:45:13.315655Z","times_seen":7,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/w3m-modal-b1ff8ef1.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/w3m-modal-b1ff8ef1.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b44f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"939d5ed7952354468d68c7d0ad95cb4c","sha1":"f402c7b845087dcb86479606875bb6d6bcece0e4","sha256":"100384b853afc98771bbceb371f77e3cc0bd4d8a601c8363d1ea31035ccf941c","sha512":"542ed5bb829766a962245b5b32cd1aa40caf5ef780a8c68ffb6de057601ed8acb566afe514bf8b68f358fcb716b45645d92806b31753c13b4dfdf6592aefa84c","ssdeep":"768:mBEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:iCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"ae2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec51d58fd498869bf735","first_seen":"2026-03-12T16:55:22.864975Z","last_seen":"2026-04-15T05:45:13.325582Z","times_seen":7,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/ref-3335a8aa.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/ref-3335a8aa.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-86c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"c74c45c1bc4625c4b3614eb4c826dc20","sha1":"97fcd282303451b149ac68ca0d2b64758db0704e","sha256":"72d7bd1827c0c2feca9b6c730880c3d5151b39580ed02253fa6b4935669a9394","sha512":"d41e51ebd278c80ee41c96ca9f87302121a5435430de2b980ec7e60d1aa3cdb5d9a04f3a8a947c8da455d6960c14ff5a7e9c37bee13c01233cc17d14eb5835ca","ssdeep":"","tlshash":"3741f19773d801d212cac6e7fc37892af11131583a65845cb0ad6bf7e83068791bddb5","first_seen":"2026-03-12T16:55:22.859073Z","last_seen":"2026-04-15T05:45:13.366165Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/mnt.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/mnt.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: FR/nkm6zmn4t21YIPx+qc+sJns37wu8Nvor7sXmx4ttMdpDYjXNjbo8Fctjn1RIR6FexjWRPOknz6GZiK1ApYyXlWXtFSljc\r\nx-amz-request-id: NN00ZKHJGH26G21Q\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Fri, 07 Feb 2025 08:50:51 GMT\r\nETag: \"bfbe6b0405422cc264680437fefcfb96\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 29193\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfbe6b0405422cc264680437fefcfb96","sha1":"c6b51299017551415982de1d412e90d05d7d84c1","sha256":"0a543865636f37f781adb998e145a6ef5a8c87c9fac6a077fafc3c703e9a8800","sha512":"9930d3e7941377d680207ca7b70da191463d20e19b6ad4c85a47f0ed1ffc2797f45675c488d8f411f26fc60a9682285c826c4deacc2e563042d0e92de48104ff","ssdeep":"768:gEBJN3nmxAwTxC4nphzFZnToJu2yN4tIzh2v/lv0lahA:gE5mxAwTwatFuDyN4tIzI/B01","tlshash":"26d2f158535aa13fb7d822dc3ac7f826f32a518cb180f05227d50c66633ad872d547d3","first_seen":"2025-03-06T11:30:53.668336Z","last_seen":"2026-07-24T06:14:46.387323Z","times_seen":186,"resource_available":false,"data":null}},"time_used":1775,"timings":{"blocked":1205,"dns":0,"connect":0,"send":0,"wait":294,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-cf3\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-07-01T21:00:47.755737Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/index-21b53c44.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/index-21b53c44.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1b4f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6990)","md5":"4c5be293d21e28e6defc1f29ca14d0c7","sha1":"0519ba50e2bad057e581c8656f2931735c9ab39d","sha256":"21b53c444ab715f26559331069112c974ab29f75c03f3e886da16d426835b429","sha512":"34060427eaa86c6e8a53065165954a217a76002118f4e42ffbc5d9ad9d68ab67d3f2cccc7fafb347108bcd069ce0f5e8bea4f5b429f0a6173183949a9e3c5cf1","ssdeep":"96:xuUFdLcu/dhPG3OMj2s5LqOsXzmXOX5Xis:EUFdLd/dhPQzas5OOsXzmXOX5Xis","tlshash":"2ee10d27110a2208f233ce8857e4976486b9e527d20616ed62713826cfd7fc727e638f","first_seen":"2026-02-04T16:46:53.860881Z","last_seen":"2026-07-24T05:38:46.722311Z","times_seen":35,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-cf3\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-07-01T21:00:47.755737Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/manifest.webmanifest","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-07-24T05:40:16.123377Z","times_seen":47,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a9b5a56a.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-a9b5a56a.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1b23\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"15be76634ddc9d89e12f0471155339c8","sha1":"19960fe52cbc474168b5988c1c9d297e0e49a541","sha256":"79793f4295cfc478fd637b15d8abba228aca5a352981efb88c20bfa1cb6ae805","sha512":"6324b3662800c0c39853e4334a01e8aba6d52c63707f3cfd11873fcace34e311f8e580ef6feea25a7e53a479fe766b891ec2649dac5396b900e44608bca2156e","ssdeep":"192:rDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:rDEIRRuUCL5dmVp","tlshash":"27e1b601ba296e3cf73b84582406529561d09f59ea30c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-03-12T16:55:22.830914Z","last_seen":"2026-04-15T05:45:13.277003Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1d08d906.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-1d08d906.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-127e\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"4aa99fee6dafdfa0ca721935abeb1b6f","sha1":"ff87b575043779474c18a9edfb0884bdd35ed14a","sha256":"8e96b3d61ada813ca5d45f205022f238f7c3cac56ca5fbaadae85738b1fac16b","sha512":"ac5dabec749cbdd5e92ea0f27b1528304103d15c73938786664db42597383b01f8d48e014bb228fc1ee4a33ca7da820a13006e48956851d531e348944a4c1e12","ssdeep":"96:WXs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:Es7o9KK8ZMY2vcpaC5c7eI","tlshash":"3aa144c22daa252a3951d099ae5b8910e322c007d21dcebdb9dca1fccf595c3107e722","first_seen":"2026-03-12T16:55:22.857337Z","last_seen":"2026-04-15T05:45:13.345845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-500545c0.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-500545c0.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/receive-dd4142dc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-dc69\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"de35a8a60a9117e3cf0b29cc71f26838","sha1":"4615b88938ffbad2a0ef2744acf383cd8838ffa4","sha256":"fc996c43f3b0f20eb4d724f9c7af53fbdd66b800bcab392b690e9e32649f49c4","sha512":"ad4c41b71223bcc0bbfb7dbfd06e4ecc8ff4e29f6cabb8e55589666304ae61e1fd4634545f444269891a91a2190ffd87be9777a962339e877568a0ea8718f151","ssdeep":"768:ElYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:fAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"ce431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-03-12T16:55:22.854707Z","last_seen":"2026-04-15T05:45:13.326294Z","times_seen":7,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-908eaf68.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-908eaf68.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/receive-dd4142dc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c3b\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"6a45e7de68b26701f37dc8ac7e2cf75a","sha1":"3977c612faf9663fdcc5eee807fca284fd9eaba1","sha256":"4416fcdc9f731a72fac68cc1b4f81d66839da5bd12ff93fdd69dc9e0dc96c595","sha512":"b168da57c881a2284952b719195857337bf4dfe63e18bb2382ae77cb5de2d1e6c23e214b0b5103bd911d018b3137d7869894349bff2c68d9a55b120e64876d71","ssdeep":"","tlshash":"a55197c1772b50b59107e0d40faacd000b2291279526cabfbddf71f58fae7496819332","first_seen":"2026-03-12T16:55:22.808918Z","last_seen":"2026-04-15T05:45:13.33511Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9e46e5d80eb12efa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 16436\r\ncache-control: public, max-age=43200\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\nlast-modified: Mon, 30 Mar 2026 07:16:42 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5765,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ced122d6d7eb64792e57379ff0bce2d7","sha1":"7d6645beaa2744386233c9b37261df2d84737e0b","sha256":"802702b08fb2d8ac63db37aaf34b678b064384de2d7b829a0551953e8497cc5b","sha512":"ba8017a29565fd1a831b7f786681644ce7097a8f61c65d5cae175c54684b60962ab972268bfd413fd21f6650211a15ff1106cf8c197e7aedd9ebf58d02e41e6b","ssdeep":"96:gNbhiWUmyvx9JwTUmo5OkvoyM79hT4bRQ8osJohKlR8iqpmavlT:nwyJv4xo5Rwb78V1fJl5ZadT","tlshash":"6bc1425f4bd0adaa8f34c784f56cf9eec42ee007c1ccacd995b0893541fe4a76641126","first_seen":"2026-03-30T11:51:07.862224Z","last_seen":"2026-03-30T11:52:51.800944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":32,"connect":2,"send":0,"wait":99,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/index-3cd34980.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/index-3cd34980.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-6bb\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1722)","md5":"8954e8e993c0cb85e470210a616216fd","sha1":"f7c0e384e8782c24e248cc13b4b9bd2394e779d0","sha256":"3cd349806396c6cbd9d6d50d68e9c265823560f0e9402ac67009406e9dd034f6","sha512":"83edd994300f5877052174f1ad511ad9e75d0d86d510478316925da888a7ccaeab1b53e15d0635be48422bb28dc41439b3374aef940c54d25fea70442669b41b","ssdeep":"","tlshash":"2431252ef6e063385e3e697057da1dd4e33e84208d629094fd62e424cac76b202729e6","first_seen":"2025-12-10T07:39:13.890273Z","last_seen":"2026-07-24T05:40:16.103095Z","times_seen":48,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/send-e4234d39.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/send-e4234d39.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-8337\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"44b0d2cd2bf6d091e7b13fc924369cca","sha1":"725001ffd2ec2989639a2c4dc36c656824eef75c","sha256":"a5e863d9306830012a0cc970d42c4cfa3c8108a9d4a0ba04221defcde4b97e87","sha512":"bbb82337a19f5c87de1e01bdf19b145c3dff823616d985f2dd67c7e5bffdd235ebe5242ba11f3316e6db5fca413734c7861c2b764a4b29344d7b794a2fe1cdef","ssdeep":"768:oaYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:zYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"03e2e89433fa281d29a7516dead69e006331501b811cc5fdfaeca2f18fa9e4248f7734","first_seen":"2026-03-12T16:55:22.815337Z","last_seen":"2026-04-15T05:45:13.312545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 03:17:08 GMT","end":"Wed, 24 Jun 2026 04:17:04 GMT"},"fingerprint":{"sha1":"C7:61:00:F2:D5:FE:2C:00:75:61:A6:53:17:66:5C:87:6C:DA:E0:F3","sha256":"5F:1A:78:B0:83:6C:E7:52:BD:B4:74:DE:50:8A:44:F2:0A:90:8A:03:24:08:4A:D4:F7:C5:AE:59:EE:6A:A1:8B"}}},"request":{"raw":"GET /mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95Bkmf7m6czHGPNm7MVPEEOEiOqZw4K%2BQYWaxaRLMtzPZT6M2v6xUD2XuiNWFeWhbRqV1FlRI6iykWbgaJP6WEdNun2jpyRCBHLh4IaioLbHdml5XtkLsisCGh7oV%2FdsCBqvlg%3D%3D\"}]}\r\nlast-modified: Mon, 30 Mar 2026 10:27:32 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e46e5dad932569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e96920da89cc922274247fcd293696f","sha1":"84896a016118ac7d371cf40b55601c9b2ea16e08","sha256":"03818c009e623cf4b6169657f9cb99bcd53e89fe152cc1809154c5d018982e8f","sha512":"99764c35f30fa0ffa84d012975cbe5c977d1272b6f9cc25cf47ad25f0a27446fff2ec7cf9dfadc74714a97df2089c1fdeeed8f39a38ca0d49db04b9baf815ede","ssdeep":"","tlshash":"2a11bde12e3ca3ae80c7438e855641669b2f73f571064c901b3ca5323105becf883928","first_seen":"2025-09-06T11:46:38.597902Z","last_seen":"2026-07-24T05:40:16.109368Z","times_seen":104,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":34,"connect":1,"send":0,"wait":64,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-ddb31605.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-ddb31605.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-716\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"01e180ccd3a6abc71fac9bb289ec4f02","sha1":"58ab965eb4025e21aa492a23bc3818bb463ea66e","sha256":"776ea42996263432291bbd28400bf5b5a72debbf92e503e64a544940bd551187","sha512":"71d9748d7232ddbee0751e6b55b7572239f72d3aa911de9ac5911946252af128dc4617533705ab524c4f7370f9bd07b5d5babbe38417ba2a069ca3c291c0c988","ssdeep":"","tlshash":"d83185c2f1db2579b37adcaac0984461d23c0949f50097e6f17f5c1a2b601c0bf5ab18","first_seen":"2026-03-12T16:55:22.823313Z","last_seen":"2026-04-15T05:45:13.314817Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-ddb31605.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-ddb31605.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-716\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"01e180ccd3a6abc71fac9bb289ec4f02","sha1":"58ab965eb4025e21aa492a23bc3818bb463ea66e","sha256":"776ea42996263432291bbd28400bf5b5a72debbf92e503e64a544940bd551187","sha512":"71d9748d7232ddbee0751e6b55b7572239f72d3aa911de9ac5911946252af128dc4617533705ab524c4f7370f9bd07b5d5babbe38417ba2a069ca3c291c0c988","ssdeep":"","tlshash":"d83185c2f1db2579b37adcaac0984461d23c0949f50097e6f17f5c1a2b601c0bf5ab18","first_seen":"2026-03-12T16:55:22.823313Z","last_seen":"2026-04-15T05:45:13.314817Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/index.html","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://krakex3.vip/","date":"2026-03-30T11:50:35.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:35 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-93c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2364), with no line terminators","md5":"86e40b107b63d0ea673aa8ce66b5a200","sha1":"632bc7e921f798ec92f3e0ff203ba26bc1d49ccb","sha256":"a0b6b94c92ced61123e0a6b0840eaa8740179f1e59804855ad4ab0ef401db2bf","sha512":"8a39b604bbcec2b15a04e5ed45c2ee34459b834b118f4e8c58ddbf08878ade1136a3793ef960b60a04babff5faf71e116535858ef64efb7a1c5e8a1e533b7c9e","ssdeep":"","tlshash":"104121539482261af0238eb992f9b924c57cd426d6821f9970a179b8c7c2fd681e331b","first_seen":"2026-03-12T16:55:22.818316Z","last_seen":"2026-04-15T05:45:13.354379Z","times_seen":7,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a5a83fe8.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-a5a83fe8.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bc7\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"fd28098fd42abb3e7c53052d0b7289e0","sha1":"83083e9919a8e4f75d03ee936c768b565190dc6a","sha256":"e7c4eabd860022c67d07d45a2e1f96ddbdf5b329315fcc1f0ad1fbb429d95913","sha512":"7e4be44e3aaca0093f2b141a6a626c45a0aaf441d4dddcba1bcc926f25d59401cd72680e3333cd1cbba730b494dcfaa34cf71d8e9604aa8cbd897be50603bf8a","ssdeep":"","tlshash":"71511188bfb43d63371bc065f0ae8521e335a03a9c1c9e3e739d52f84f69682555d932","first_seen":"2026-03-12T16:55:22.849579Z","last_seen":"2026-04-15T05:45:13.281334Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9d24c88f.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-9d24c88f.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1363\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"c96bb322f6b946e216e9b7196dd940dd","sha1":"b4ba324d2c9e4b3310c3abfe32b3584e68a3838b","sha256":"748da57ce1edeaf713b242f2f378a28c3eda62c06b8afd5533342ba5e5d9f29b","sha512":"3b8a3f2471c58af71b87a85812c6f4d69f6dfd3f82e7a93cc16c77fc367b2e00d1d243fb38cf2aecec6fb5293c9802e56d95380077ad16fb7a805d0d034b16d6","ssdeep":"96:0jZJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0FJTFyhlqTsd9fTOsy6Xd","tlshash":"dca1a7a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fbd084d4df299","first_seen":"2026-03-12T16:55:22.863037Z","last_seen":"2026-04-15T05:45:13.346744Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dot.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dot.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /1KiWfDw/DMQdbarspmlA+ZAQ4OXieU5zpGfbqMfJdegRSQ/L7Ophj/WJWlX4BhmPL7Q4gkIRpi5cYxLFZwfWe63Ez1qrfHW\r\nx-amz-request-id: NN07KZ599BEZW19Y\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:58:32 GMT\r\nETag: \"ecbeee3b982b8166e9b11ef7f85a9bdc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbeee3b982b8166e9b11ef7f85a9bdc","sha1":"79c69d70b46af0d2eb0447096fb9ef48873d24b0","sha256":"2d212db8dacb8164a85eec84c39038a4013d398d1fdbc680399c260a013f52a5","sha512":"6a47534c5310fbded78567b1860c94d6bd07e2e186fd7fb5057431d45b5fc80f580fc6ba4a5782e034243d2c9f1f47dc732dfab74551fc14f52b0a40e11b9472","ssdeep":"","tlshash":"d6518591b339d2b8b005f7fe023a6cb1ab926de27e33c5a55bd60c14d04740d8a925f7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-07-24T06:14:46.336007Z","times_seen":738,"resource_available":false,"data":null}},"time_used":1192,"timings":{"blocked":904,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/v1/api/config/platformConfig","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:36.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:36 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47e8ad08ec6865a5d9b55a022d4724ee","sha1":"2a758cc2273953c08589e813327c7e422f1bd7c1","sha256":"d340b8cc81e59b2ef218fe99302dc4b780deaa7110e368e73cc3c9ea79435284","sha512":"f8fa9c25345f6c649cbdb1365de467da36cc1da0dc4a546d0dfbf2eb44f127c68d96d259234b7963a6dcbefb27c6ad5b986c32bf231abbac05f44f0c913c992e","ssdeep":"","tlshash":"1a8151ce772a95b8c6e415cbd4c628190f79a9d66844f44fc29bec683ee78d13128217","first_seen":"2026-03-30T11:51:07.848134Z","last_seen":"2026-03-30T11:51:07.848134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/index-c074926d.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/index-c074926d.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-876\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2165)","md5":"24fcaa8d1efba01db124557375dc628a","sha1":"323606a4765566ff4891b9fc0107607f387b266b","sha256":"c074926db6a49f8c4dd30fa9a9101326e20a337c8aaeaa0203be8d5673ee1e55","sha512":"0cb578a5fe13704683a3d987520f9031e4df2459c38b313dce492fdb3f0686df4896168d1463566032864e56c9ffc20e10e1d6f478d9fc7b64134db34afeb937","ssdeep":"","tlshash":"79417d3be8906637d823b51497d916c4913cf1727da049e971283918cbabbf4031b30b","first_seen":"2024-08-20T09:17:43.593605Z","last_seen":"2026-07-24T05:40:16.12059Z","times_seen":52,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/VerticalTickers-be1df74f.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/VerticalTickers-be1df74f.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-14af\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5294)","md5":"440cdeabbb9eab724c17f0b5beae3338","sha1":"4c99f5d4947c5450a2d24d49aa1f5784a6216b26","sha256":"be1df74f1c54fed82321f93f8c4813ebf34185b3e4076ee17c0f759ee15bfae6","sha512":"e5e18c4697a9c2e62fb24c35ce7df30295281af626884d5cc8c5efe85fff78d4b50cde4c4b1a56938438f0acaaa250ba8e6a6d666d942be0a9a8d3694d26afe3","ssdeep":"96:yl3R5eATYYFMhn81C8Z888kFXPPbsckvWZGqzJTtTlhI:yl3R5eCYYFMh8f2fkFXPPQvWZGqzJTVw","tlshash":"91b1772b63d61f19d133dd041be9225a83a8d1b3d2b523e8a4905b258bcbf0e15f3286","first_seen":"2025-12-10T07:39:13.841218Z","last_seen":"2026-07-24T05:40:16.10729Z","times_seen":52,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-25e9e0d3.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-25e9e0d3.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-774\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"2a17a65675aae9c1402fa1dd8503ac6c","sha1":"2af0e6c7aae04538344e4846fcb14cfe677befb0","sha256":"ee425f7d56b3c1b5f4b1f7a0e87f2100fff5d820fb87f779c00aa3462c396517","sha512":"63efe203a698a4d4d2e12dc1a422ec0e3c99972e3f439151ac3c8e798a7cabcd37d0f7a8e3dca4973c7c5025b000caba735c3a3cbc74d4f88b3b5f0deaf0dcac","ssdeep":"","tlshash":"0241a4442268bab600c466d6c0968a405121002c590bc194b7fcb5e29faeacdceaf73a","first_seen":"2026-03-12T16:55:22.88049Z","last_seen":"2026-04-15T05:45:13.285313Z","times_seen":7,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhX-3214edf4.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9c2\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-07-01T21:00:47.813552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/manifest.webmanifest","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-07-24T05:40:16.123377Z","times_seen":47,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-ad0cf90b.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-ad0cf90b.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c1d\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"cda56e760bd25cfb758c254f2141c161","sha1":"1b0146e385cd09be690f8c1a7effe6addedb10a9","sha256":"99e8dc7c9dcd87b36f9295d175c89a4c762cd902b1901f7b4de4aeec121b24c6","sha512":"3eb32cca620e4e7da07411329fb966ccfecf48ff181f8a34d26a2f766c96a780bad617a2bacc3877d1e357650fc432290d4eb11f784d97a705a532479e486491","ssdeep":"","tlshash":"db516221f042ae3cf3b750652098784865410fa899646af7b1ee5e0f23d9d726b9f738","first_seen":"2026-03-12T16:55:22.842075Z","last_seen":"2026-04-15T05:45:13.308718Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-500545c0.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-500545c0.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-dc69\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"de35a8a60a9117e3cf0b29cc71f26838","sha1":"4615b88938ffbad2a0ef2744acf383cd8838ffa4","sha256":"fc996c43f3b0f20eb4d724f9c7af53fbdd66b800bcab392b690e9e32649f49c4","sha512":"ad4c41b71223bcc0bbfb7dbfd06e4ecc8ff4e29f6cabb8e55589666304ae61e1fd4634545f444269891a91a2190ffd87be9777a962339e877568a0ea8718f151","ssdeep":"768:ElYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:fAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"ce431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-03-12T16:55:22.854707Z","last_seen":"2026-04-15T05:45:13.326294Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9a6a5dc9.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-9a6a5dc9.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-593\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"b2c0a0cc945cb89cf466022af34f1e53","sha1":"09ccfd82eb75e2590f2ffa1fed3b7786c218fd3c","sha256":"6003c01736f7d50718c5c287059f788474debe9d23b75849215ada0e5c968a6f","sha512":"ea033598e556b3caec8382125d4ade834c0e72e7d48d9627dc63ed4c20d9542afc9451e7291fe9b6588a6afff5972924b99bbf259877c323561682ff923d72eb","ssdeep":"","tlshash":"e62183c9276acaf0896140768f25350132376007972fda86b6de7aa48f0c5c58a6a7bd","first_seen":"2026-03-12T16:55:22.807481Z","last_seen":"2026-04-15T05:45:13.303589Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/id.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/id.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wOM/vnZ3OBE31BvShj4O0xEAxFwx3Ngi6xH0epMFhVq/1qJw4RyE+r4zvrasx5y9MPT+QkaxcWBHvKDeUNZI/0A4hJUfPejn\r\nx-amz-request-id: NN08KFHHC3GJKVX4\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 01 Aug 2023 12:19:18 GMT\r\nETag: \"814f626fa5df0816a76957898ab17546\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 66185\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814f626fa5df0816a76957898ab17546","sha1":"5fe40d5015ddd6555acfa862e868247c8636c858","sha256":"16c5691b1435c4f30f2a171870789b914983963f2b84a4e225e08e6ec11d16d9","sha512":"4e89a4240e47fd80f3b00fc08589f79c6c60ad797371024f769728db2681f82aa1c8d61bcb1bb1ac3b26ad8952608589d4eb3ee98a29e2c684bdab6a9b7d1477","ssdeep":"1536:rERrqlUBeQM7hGVseI91rW4Fws/2iNeO0A6oVI:rE8vB8VsFrW4FwG/oO0W2","tlshash":"0353cfc39f979f67454ee30e694d604d2d1cb9f3baa260986e8d8d83b44a8443e061f7","first_seen":"2025-07-05T16:42:06.921322Z","last_seen":"2026-07-24T06:14:46.413988Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1485,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":300,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d90b3301.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-d90b3301.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bb2\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"8c674da81682dddf5a26601684c71665","sha1":"ffab90e19b3e776309f73b6d2bc84f8794ef833e","sha256":"791a8e9aeb19cc2459a8ef12619ae653d77216a3dfd33bdf6fdcb0f2e489bfe1","sha512":"e3289b8c81428fa5f21958a048f9eb4d902e2a56b4236831d400a85a7cceff2bd5e6821783cc60ef06b149bc731c9fff42738099b4631dfc0ea25937825ab432","ssdeep":"","tlshash":"af51fdc1ffa8a26ab70bc1bd155ad914e333f00540295f7f7bca12f14f5d584241eaa4","first_seen":"2026-03-12T16:55:22.820744Z","last_seen":"2026-04-15T05:45:13.331089Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a5a83fe8.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-a5a83fe8.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bc7\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"fd28098fd42abb3e7c53052d0b7289e0","sha1":"83083e9919a8e4f75d03ee936c768b565190dc6a","sha256":"e7c4eabd860022c67d07d45a2e1f96ddbdf5b329315fcc1f0ad1fbb429d95913","sha512":"7e4be44e3aaca0093f2b141a6a626c45a0aaf441d4dddcba1bcc926f25d59401cd72680e3333cd1cbba730b494dcfaa34cf71d8e9604aa8cbd897be50603bf8a","ssdeep":"","tlshash":"71511188bfb43d63371bc065f0ae8521e335a03a9c1c9e3e739d52f84f69682555d932","first_seen":"2026-03-12T16:55:22.849579Z","last_seen":"2026-04-15T05:45:13.281334Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1107c1b3.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-1107c1b3.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bcf\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"6510b61fb435b11e269b698dbf41a2a5","sha1":"d4484c8f930015cf050f7f8fc3429eb2878e4284","sha256":"fdec41b69bcf830b6339ba7062b12ae3064ce044a475e2de2cae3fcfe37e78c0","sha512":"e40fdb466a63aad6a911a28ec628f818e81a969a319482c1a120e6db9a5198a3b41cb51cebf4c7072b0070ce4f05f2c6984ed35e8d7162ea1d34fae4325baa17","ssdeep":"","tlshash":"9951b8d7b33a1176385592941eae4ee05233e01ba11cde3ebbcea1f84f461855c36632","first_seen":"2026-03-12T16:55:22.801034Z","last_seen":"2026-04-15T05:45:13.315655Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\ncf-ray: 9e46e5da1d982efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82819\r\ncache-control: public, max-age=31536000\r\netag: \"cfVAcZ3w6iX14DvHKhBFs4CgkyfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=4777+6 c=4+2 v=2026.3.3 l=1318 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-08-07T05:22:44.217442Z","times_seen":710,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8y5HF9KYg6MdRtyJPGSY0rTtgJYIGDhkAdRdK9Cof9MpGRMnJYiaFd0M4II7UwZhd9x7p1ma8yK6D4T6HmAD4UBga+tq8iZt\r\nx-amz-request-id: NN06BRG961EK77FB\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-07-24T06:14:46.325637Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":907,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/css/home-153f1fa7.css","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/css/home-153f1fa7.css HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-51ae\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20909)","md5":"307360794192f30206de9492fa2a651f","sha1":"8cf312414410383c7f0c866d50bcb9ec12227140","sha256":"153f1fa7e5bf3c57dad6eba8ced78d630bac7afe94287d98d1c41097c396b854","sha512":"5f065934743d6abb8fa538043686cf228bb1c68d83e35574f3e4c7deb66b39a01aebd6be3264cdf237716b13e4525183e7ef704a38c9c6c6cc186767fcb05bea","ssdeep":"192:q9UJAZev9+FdCvGOYRiwvkYrIonYSL2U93/tG8lUQ+iNCZp:q+ByiwvkYEonYifv08y4NW","tlshash":"e392537b220a3318e137ce505be91254922cd573e21226ed6865793acfcbbc225f275f","first_seen":"2026-03-12T03:41:14.082686Z","last_seen":"2026-07-24T05:38:46.682017Z","times_seen":17,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/VerticalTickers-51842e44.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/VerticalTickers-51842e44.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-59ea\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"570019ffb59b1cfb223a5cd7949c9c0f","sha1":"5c90a3e3e92c0416511cfd026f3fda75ebe31d6d","sha256":"e1a6013a6da2dd7f0adf9fe7a68ec96033c8121e15532a780e16f0c206cfa698","sha512":"8ab4224f9ad7cc8c26415a494b9152a05b542fcfdb72529f8a29e5e53d29c3b65aca566dd5c8ba70443ca47397aec07c9305242d4fe53d47124ad04377d0cac1","ssdeep":"384:i7589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:S+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"8ca2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb95d25f7fa9","first_seen":"2026-03-12T16:55:22.84593Z","last_seen":"2026-04-15T05:45:13.334247Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/VerticalTickers-51842e44.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/VerticalTickers-51842e44.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-59ea\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"570019ffb59b1cfb223a5cd7949c9c0f","sha1":"5c90a3e3e92c0416511cfd026f3fda75ebe31d6d","sha256":"e1a6013a6da2dd7f0adf9fe7a68ec96033c8121e15532a780e16f0c206cfa698","sha512":"8ab4224f9ad7cc8c26415a494b9152a05b542fcfdb72529f8a29e5e53d29c3b65aca566dd5c8ba70443ca47397aec07c9305242d4fe53d47124ad04377d0cac1","ssdeep":"384:i7589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:S+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"8ca2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb95d25f7fa9","first_seen":"2026-03-12T16:55:22.84593Z","last_seen":"2026-04-15T05:45:13.334247Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9e1633c8.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-9e1633c8.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9cf\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"f672dbeab2a79f477b63594fa5edb68f","sha1":"ce196a3702377e096b4681df1e2f7fa2c1f8a220","sha256":"92dc11e4d87dd1f996a4ef6906ba9957b4d852c53deca6368fe31f3289e2722e","sha512":"84a9780466f75eaf8274eab8307b6e1755fdaf43b08f844b7fe96597f04d59ec3d1eabd29ba638c33898e8d44d79859b3a8750dcfec241173c32dd561a654e6e","ssdeep":"","tlshash":"c9512e85b213a8f7386261f9069f9315662438120aacd62878dca596cfce7efa434123","first_seen":"2026-03-12T16:55:22.860481Z","last_seen":"2026-04-15T05:45:13.28835Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\ncf-ray: 9e46e5da1d8b2efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 31088\r\ncache-control: public, max-age=31536000\r\netag: \"cfNST3q60e3DEaxemhB1mMC8dRfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=7+3 c=0+2 v=2026.3.3 l=1264 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-08-07T05:22:44.069579Z","times_seen":646,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\ncf-ray: 9e46e5da1d942efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47346\r\ncache-control: public, max-age=31536000\r\netag: \"cfUhkIr6pXeZzg1ZKkKbDihKqDfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=11+4 c=1+2 v=2026.3.3 l=454 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0be57955d7f50dd9f7754b6dc10309f","sha1":"1120733df2e8f9bfde2f713c1de00711d356d4ef","sha256":"a29fe26a43771dee6d0de34f06c4aa118119e919a370bf6b37b89d89eb157547","sha512":"b115424fbd8acbdaa1fa6efc5e7f9b447adaa80ea67d542fd77c68fa0748f993670f6befa7458019db1243b2056f03872c714a500260333b50fd2aec778fc95b","ssdeep":"","tlshash":"02f05c1dc884c9a0bb9834cbe8a2089b02504ea0cba61a320a052dca102f45b0d5aa71","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-08-07T05:22:44.201518Z","times_seen":548,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2190\r\ncf-ray: 9e46e5da1d962efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 73583\r\ncache-control: public, max-age=31536000\r\netag: \"cfPi3Q2pR9-1VkL9hnF0Qjwt9_fmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=8+7 c=4+2 v=2026.3.3 l=2190 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ec24d6d0f8cc15531022c1d2d10ed5","sha1":"a35dfc22eac4a148d164ba1c0c0a30622d996cd4","sha256":"c17fc5b943b9ef6f7b6ddd64e34efbe217a7328513c76dbf33aed86c0019793a","sha512":"47054745bf01743c5756f0cb8a021dca767c880bbe1ec98a44d6819d6395d991dd88def918500862b763955f09ff0b31a7e8876e4178fd2b0aaaf7711df24557","ssdeep":"","tlshash":"eb412940ad424ea8e6031af82fac34a8555a0d6f64478c0d8029f336325fdd2bac4f6a","first_seen":"2025-03-04T08:48:45.474684Z","last_seen":"2026-08-07T05:22:44.119784Z","times_seen":532,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:48.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:45:45 GMT","end":"Mon, 11 May 2026 20:45:43 GMT"},"fingerprint":{"sha1":"2B:E7:9C:F1:20:87:57:1D:74:57:A3:8A:2F:DF:E8:53:2C:1B:2D:9F","sha256":"72:65:51:C2:D8:A0:F5:34:00:8F:17:4A:E9:58:C0:8C:A7:4E:37:0D:45:CB:74:E2:1B:47:B6:1F:87:F5:36:E0"}}},"request":{"raw":"POST /batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 779\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":779,"data":"[{\"eventId\":\"2fb53d17-15eb-4c97-87a1-6f848cecbe57\",\"url\":\"https://krakex3.vip/index.html#/Home\",\"domain\":\"krakex3.vip\",\"timestamp\":1774871438478,\"props\":{\"type\":\"track\",\"event\":\"MODAL_OPEN\",\"properties\":{\"connected\":false,\"caipNetworkId\":\"eip155:1\"}}},{\"eventId\":\"db512e58-45e3-4382-963b-b0c09f599a32\",\"url\":\"https://krakex3.vip/index.html#/Home\",\"domain\":\"krakex3.vip\",\"timestamp\":1774871448479,\"props\":{\"type\":\"track\",\"event\":\"WALLET_IMPRESSION_V2\",\"items\":[{\"name\":\"Binance Wallet\",\"walletRank\":\"10\",\"rdnsId\":\"com.binance.wallet\",\"view\":\"Connect\",\"displayIndex\":\"2\"},{\"name\":\"Trust Wallet\",\"walletRank\":\"40\",\"rdnsId\":\"com.trustwallet.app\",\"view\":\"Connect\",\"displayIndex\":\"1\"},{\"name\":\"MetaMask\",\"walletRank\":\"20\",\"rdnsId\":\"io.metamask\",\"view\":\"Connect\",\"displayIndex\":\"0\"}]}}]"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Mon, 30 Mar 2026 11:50:48 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9e46e6195ef8b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T05:07:07.342121Z","times_seen":17756185,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":55,"dns":34,"connect":1,"send":0,"wait":96,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9d24c88f.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-9d24c88f.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1363\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"c96bb322f6b946e216e9b7196dd940dd","sha1":"b4ba324d2c9e4b3310c3abfe32b3584e68a3838b","sha256":"748da57ce1edeaf713b242f2f378a28c3eda62c06b8afd5533342ba5e5d9f29b","sha512":"3b8a3f2471c58af71b87a85812c6f4d69f6dfd3f82e7a93cc16c77fc367b2e00d1d243fb38cf2aecec6fb5293c9802e56d95380077ad16fb7a805d0d034b16d6","ssdeep":"96:0jZJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0FJTFyhlqTsd9fTOsy6Xd","tlshash":"dca1a7a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fbd084d4df299","first_seen":"2026-03-12T16:55:22.863037Z","last_seen":"2026-04-15T05:45:13.346744Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-6857c7ca.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-6857c7ca.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bdc\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"861c6afe3395c6a9378ea840dead57f1","sha1":"cafb73158459679a27d00e420c15c65bab9335e9","sha256":"4645a9a90ce3679e043ce519f5eaa0092397bc7acf57eeedb4d225bf8863877b","sha512":"ab76ec9a16f5adf8de00af6c2674f0b0716d80d6f8cb582a23231cec865c0d30fe7810d5fba313d65238cd473589b10559dc60846459cbe79da430a3cda1d309","ssdeep":"","tlshash":"30515484a6a6581e520790adc7bf4c01973ae41fd029cafeb6dc90f54fba98115ba331","first_seen":"2026-03-12T16:55:22.801817Z","last_seen":"2026-04-15T05:45:13.3107Z","times_seen":7,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 910\r\ncf-ray: 9e46e5da1d8f2efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 81574\r\ncache-control: public, max-age=31536000\r\netag: \"cfmeYviP6kCNFgjEWLRBgPUJnDfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=9+2 c=0+2 v=2026.3.3 l=910 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-08-06T03:25:28.054867Z","times_seen":611,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xmr.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xmr.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iV5irTx/UJtM80kjQOktuP6PjaDGGHffAHwf9w2slKYSqms8KmOksUSeRjvZUKP+f8aO45IVAOioD8VCaFnfbzwm3nrXNmo9\r\nx-amz-request-id: NN0AHJJFA747ZRKY\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:26:40 GMT\r\nETag: \"fdddffb238bc363e6e7d7e9fb8b2cbfc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdddffb238bc363e6e7d7e9fb8b2cbfc","sha1":"2472cd3130002709666e130d8bc96fe1fe23fae7","sha256":"d4056d45614e9aa58321b8db2cac9ecbc6c3d9048d49ccae12a6ca5a5a31a06a","sha512":"da68083024e8e5b8412c24febd6fe422cc780c08242b2a4ccd59ff1c37feb820e78046b3732991589d28681f4480661505107dc06616f178be39b310a7674fd3","ssdeep":"","tlshash":"64f002a8f1d8a71c78086344e73b6be061d17ed5f6434351f388bb25b2440569c106d3","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-07-24T06:14:46.317311Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":911,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-b7a416bb.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-b7a416bb.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f7e\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"a304de782e3a1982407450b066fc8c8b","sha1":"651ed3180e6b7355d5330f81ef5976bbf8983c1b","sha256":"4e0d04746970c0922a7dd1da94db7a8abca6a52d27b964933cd46ec4e6094542","sha512":"4421f779724a80839930c82fab6341a9202076804a4c3dfb8ef5c88e42887c27df28581ee2655d708586e4e3f5a4a865083fd83b532207e6beeed1f79a45a1ef","ssdeep":"","tlshash":"2e81969ab7771864342b42a9fbde4b245232b05e0a1bdd75f3cc12d58f48a689b4b230","first_seen":"2026-03-12T16:55:22.821582Z","last_seen":"2026-04-15T05:45:13.269973Z","times_seen":7,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-e6521786.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-e6521786.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f2b\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"2fbe582fe14006d7f683ecd82a35c824","sha1":"964aea3d211de25fc724b73dc6c70a544c9b7fed","sha256":"fc736fed8435ab7769dff3a886a179ee41dcc2616a1ed474469893a9f64b1f2c","sha512":"74efd46a634a762510df53544ac9fac88f97d9281e940f16c2dffbe40518c3aa29c2e18465731dc3063ea4c63ad409506979a885d5269b0a32110f162e35d1b8","ssdeep":"","tlshash":"3d81d95252bb9178a861d1e10fdf16842216943b5a18c47ebaca61f08fc72bc9839bb1","first_seen":"2026-03-12T16:55:22.851031Z","last_seen":"2026-04-15T05:45:13.330314Z","times_seen":7,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-49d29c21.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-49d29c21.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-38263\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"d638dbc28c50dff4faed1ae0eb44709e","sha1":"fdb393477c3e25b2a826037cc1357fbb8b85d5b5","sha256":"8fef8e5c0bead675652fc0aad7c900dc5fa8a1d5a716facd2be3c8f373be5a40","sha512":"19abfad261a6b61b7d53d5f3e053c2b1af6a30cce047c6c3efe6254e1e737f1d9da2601dd71207cbfa4336d0fceaf0b1df3156fdbb49c0020c2e6f5540bff8ff","ssdeep":"3072:G5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:riZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"c324f8546bb069186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-03-12T16:55:22.847583Z","last_seen":"2026-04-15T05:45:13.355342Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-5c39d86c.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-5c39d86c.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1046\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"31defc23a8a751eb880853e554c09c0e","sha1":"86f03041519abcd79610a36d9f0ded8cced111c1","sha256":"2a714fe6cf782f103d614ef3279efb4aae1b9ba2f39eefb999b072e749babba6","sha512":"594bceb6eb2a4399c18ace486d020101d6b75f27654437227c0a140a3272df8ea3aa0b9b67a45b100fb3e3d2edb2d2c15cba86047f14f9ae923a8a2fc84b70ee","ssdeep":"48:qAhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:dCgEQM0o8hJwisSPjgZDIKL","tlshash":"d58116c57fa815e53713c060aa9e4c25e331a027a8299f6e7addb0f88f55643781d373","first_seen":"2026-03-12T16:55:22.828645Z","last_seen":"2026-04-15T05:45:13.358352Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-e6521786.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-e6521786.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f2b\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"2fbe582fe14006d7f683ecd82a35c824","sha1":"964aea3d211de25fc724b73dc6c70a544c9b7fed","sha256":"fc736fed8435ab7769dff3a886a179ee41dcc2616a1ed474469893a9f64b1f2c","sha512":"74efd46a634a762510df53544ac9fac88f97d9281e940f16c2dffbe40518c3aa29c2e18465731dc3063ea4c63ad409506979a885d5269b0a32110f162e35d1b8","ssdeep":"","tlshash":"3d81d95252bb9178a861d1e10fdf16842216943b5a18c47ebaca61f08fc72bc9839bb1","first_seen":"2026-03-12T16:55:22.851031Z","last_seen":"2026-04-15T05:45:13.330314Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1aae9526.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-1aae9526.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-568\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"e35c6d2283184da2e2ee2f962d978617","sha1":"77642f77d797186b495e610e59ea15f9e8c0b170","sha256":"09dfaeb54ed325674968b34ba9e5c9053deb7de0675545af1a9c047e322c6712","sha512":"8c7a6804cbe68fe7a0a3f1a4a06a1ef242a4061e0c617c5c43ce2e037702099396d04d33df92b7483b16fc858d72b7d11a869a8660ae30ab0a5b933e27a0e014","ssdeep":"","tlshash":"642136881669d7f205859599c6e9ad028125051bcf28d0a173cce1dd5f6ddc4c5a6b33","first_seen":"2026-03-12T16:55:22.822404Z","last_seen":"2026-04-15T05:45:13.297627Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-6c9cef39.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-6c9cef39.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-104d\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"3dc3c4f44f473fb0a351fdb36531de8e","sha1":"57cce8b649feb62e9aff2d79818934d8f19e359a","sha256":"0681ad2b343ebadfe5203e239adc5fbbf0a8d2ef03c688bc0dc658e6b67456cb","sha512":"0c35fc6a6de7dd34c77ad9977eeb608caf90fc7cdaab09fd9168e412c05b4bd22318cc1be53e53a26ccbc7a3f34481b88738f424422674c83956cd00bea347a8","ssdeep":"96:U5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"f981c864b37d217a79c390588d366d01d334401ad11ec9a07bdca0a78faa2ca9db7771","first_seen":"2026-03-12T16:55:22.80659Z","last_seen":"2026-04-15T05:45:13.311649Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-559f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-07-24T05:40:16.112458Z","times_seen":52,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d513d59e.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-d513d59e.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7477\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"0a5d9db5082a28e1785d86b2db2525d3","sha1":"b8d079af4f4d0222acd707b00a5d1ccb7fc21349","sha256":"55f165fabfe1eb657a50423ceaecdea5c9228aec554634823f4b0971bccbdc7f","sha512":"19fa56c806521e40de628f7e1b4c98748762d91c8ec32592eadb9021a437c867cb8b5e1374a3a8109baf153d9574c93153492b075842256bc4dd9cf46a703c76","ssdeep":"768:LnfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:m6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884acfb4da9d37f79e6a94bbf2c","first_seen":"2026-03-12T16:55:22.878363Z","last_seen":"2026-04-15T05:45:13.320307Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-dc6c0f23.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-dc6c0f23.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b3df\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"34d4b40271d601275b4110dfeeae6f06","sha1":"8dc4be576be03d1321365f8e76eaceb6351ea1cc","sha256":"d6f2a417c26b0a4b457a8dfe02f13b7e478e6454b8698f7bec40706985576454","sha512":"eeed29ae3ed96b20ec5f0536081f1fc3a68d989c4c621178b9d467b034aac1f443ec12e5cd864d939d4d37fdad5d2f35bbe42586ff9fd31595e70738f9b09169","ssdeep":"768:1PYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:9+qIzcUWb67sHYbzyER","tlshash":"3723b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a719b1618edd6bcda","first_seen":"2026-03-12T16:55:22.83672Z","last_seen":"2026-04-15T05:45:13.362208Z","times_seen":7,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-fc6d5a31.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-fc6d5a31.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1008\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"3e1006835216683dc17e7b93a2b97ad8","sha1":"c486940c30ff8b9f716697ac8da66ae85be7be7b","sha256":"2cd22ea99865c65f65fc2aa037057dd1809df32cc0c6eaa9bfa937be197bcd5b","sha512":"476eff1023d4174f2900ac7a40a1b3598feaa34e5d50369adb226e7c66cfbab81dd7aa77f07ab2a9bbe29f138ef8f0314fb17a213422f94c94f669e8e0d1fd5e","ssdeep":"96:1JPHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1VHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"1881c5857330d912251e8a6867fb8206373a50274225c4fcb6cd9af84fbfe459b75b70","first_seen":"2026-03-12T16:55:22.824614Z","last_seen":"2026-04-15T05:45:13.298616Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-1d08d906.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-1d08d906.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-127e\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"4aa99fee6dafdfa0ca721935abeb1b6f","sha1":"ff87b575043779474c18a9edfb0884bdd35ed14a","sha256":"8e96b3d61ada813ca5d45f205022f238f7c3cac56ca5fbaadae85738b1fac16b","sha512":"ac5dabec749cbdd5e92ea0f27b1528304103d15c73938786664db42597383b01f8d48e014bb228fc1ee4a33ca7da820a13006e48956851d531e348944a4c1e12","ssdeep":"96:WXs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:Es7o9KK8ZMY2vcpaC5c7eI","tlshash":"3aa144c22daa252a3951d099ae5b8910e322c007d21dcebdb9dca1fccf595c3107e722","first_seen":"2026-03-12T16:55:22.857337Z","last_seen":"2026-04-15T05:45:13.345845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-c28c205a.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-c28c205a.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-162c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"40e152d7e754dc63fde36d1b623d9ce4","sha1":"fb8669015d6e5c3fc5094f46040cedf0f10865b9","sha256":"5a087037eee74c54ab329bad9bcf20e19e61e7298e9fa03b2aa7d6fcb377ea5c","sha512":"dbc3d1ca6bde2f174605de886ed7b4568d09628fcafe67fe0f353f935cb16e41caa68982f91e3236066f2b88c868dbb419a5a4d061db7f6c5fe5994e31cb2feb","ssdeep":"96:eo2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:32ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"03c144d5bdbd2e7b3517c028e16e86a4e334b0279424df3e77ac61f88f59942181c931","first_seen":"2026-03-12T16:55:22.817029Z","last_seen":"2026-04-15T05:45:13.336651Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/ref-3335a8aa.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/ref-3335a8aa.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-86c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"c74c45c1bc4625c4b3614eb4c826dc20","sha1":"97fcd282303451b149ac68ca0d2b64758db0704e","sha256":"72d7bd1827c0c2feca9b6c730880c3d5151b39580ed02253fa6b4935669a9394","sha512":"d41e51ebd278c80ee41c96ca9f87302121a5435430de2b980ec7e60d1aa3cdb5d9a04f3a8a947c8da455d6960c14ff5a7e9c37bee13c01233cc17d14eb5835ca","ssdeep":"","tlshash":"3741f19773d801d212cac6e7fc37892af11131583a65845cb0ad6bf7e83068791bddb5","first_seen":"2026-03-12T16:55:22.859073Z","last_seen":"2026-04-15T05:45:13.366165Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-4b7f89b5.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-4b7f89b5.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-afd\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"a86e0f0ee2c1c7befb74cc5f4a84bf45","sha1":"3d588157398156805196a7d092edd30967308fca","sha256":"156156a0f7ba3c3a1c11b6950cfe15daa40de2351a65d53e3db60333e79b09a6","sha512":"b010ebc2b0f06f0c9547a6b27d53c8ef06a63520449c299dc9206b319081a15cbedf7dd1249e1bfeef5570806bd3b698eebf7a1e31066728614c6029633cf1d6","ssdeep":"","tlshash":"955144c972242a7637538055d19e4d117321b03ae438fe2e36dda1ed8fa99835829a33","first_seen":"2026-03-12T16:55:22.876186Z","last_seen":"2026-04-15T05:45:13.380429Z","times_seen":7,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-a1ade1fc.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-a1ade1fc.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-42e1\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"afbd5b4f8e7f8b2912972faea3330203","sha1":"7f14c7ce2c7d70e5dd677a5faf04d1a57dce0553","sha256":"08c1d3313dd2f22dd0a9dac24efd7cc641e2ab3e0a38378ab2e15f358f5aed21","sha512":"95c04b7b6bf21ea096f5ec6c16d01a33e563c1e05315709393b25feffa6bc62b32d524756c5b315fcee364bb2c6026f6a4f842e884ae1ec6cc482d075646112a","ssdeep":"192:QBhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:Q0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"1672a7ac3693bb28a9875bec26f55150f6343812442ed5bdb6ddc3e28f16a844cb2371","first_seen":"2026-03-12T16:55:22.825409Z","last_seen":"2026-04-15T05:45:13.379612Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1992\r\ncf-ray: 9e46e5da1d862efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49638\r\ncache-control: public, max-age=31536000\r\netag: \"cfctNhB4Bi9Sx1OSjZpNEcxaPsfmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=9+6 c=3+2 v=2026.3.3 l=1992 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-08-07T05:22:44.056204Z","times_seen":682,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/sui.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/sui.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: oalFBPEsBTZofPnT08740oeCErjW1zBrZIVm0oZuI4hmjByBaVQKlVBw56v/arkeWho6E2+rJZ3xCd5nM+cI74DxEL11c8O2\r\nx-amz-request-id: NN09A2EXX5PXRGCX\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Wed, 03 May 2023 02:12:27 GMT\r\nETag: \"4ecd0b491a611abad73010840bc6cfff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1547\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ecd0b491a611abad73010840bc6cfff","sha1":"b8067340a437daa9fcf8bac9e718d5955e3049ac","sha256":"7c02270653440d5120b208cd79c2778ebe629b3d3528df0c61cbfa00b97a43a2","sha512":"b307646522b4518266e8960820e34eea4c4a27fa230f69ad0bd0b2b15b330fcf03500654e1913303a62ba7d5378a000329b6c08d31428854dac293aa00c9afd7","ssdeep":"","tlshash":"be3123ad279df57a8400eb38824b14703ad37cd66b05d43c67f42e5ada1905f26a168b","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-07-24T06:14:46.39612Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1558,"timings":{"blocked":622,"dns":44,"connect":277,"send":0,"wait":297,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bts.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bts.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kOUP0Y3f62DWyiMJiKOFG18fVl3uIvDWyr1QxReXlL7qpZB5idxnw30ODUfCFoPDNycZcujfiIajxZOQSmPTpKQpgFAWvJdF\r\nx-amz-request-id: NN041DCEHJ4XB6HA\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:40:04 GMT\r\nETag: \"a12001eba3f8b40d252d09e0d21f6884\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1433\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12001eba3f8b40d252d09e0d21f6884","sha1":"874702fd7e69b788e419bd5258c9a80a9edc486c","sha256":"c9c78d7bb49415d4816f380f883baff55ce5f88997875c36d8ea98846a191c5e","sha512":"891a2a6a3f995e8070e6a6f2c6b9922be3539cbc22347e05fd867ee4a49495a5a6d2f4a7db5bc641daa3c981d143d14d7526d018af2252ba3f7477f7e6afb931","ssdeep":"","tlshash":"0c217411b324a23c30087afc527ae473fe605ef2951150d4dbd90d80f95266dada2dd3","first_seen":"2023-09-10T20:06:11Z","last_seen":"2026-07-24T06:14:46.389451Z","times_seen":280,"resource_available":false,"data":null}},"time_used":1479,"timings":{"blocked":1189,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhX-3214edf4.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9c2\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-07-01T21:00:47.813552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 69\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-45\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-08-07T04:52:15.520576Z","times_seen":137,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/home-87506211.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/home-87506211.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-58cf\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22735,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"d712e767e3c0d7a822bb71d67ce3705e","sha1":"0a44a58e83fdc551200218f7bde60e87c277f69a","sha256":"a9d3a69be62287a2f374965222fe36327f5bba53476f692e82a3a5c9a31bd959","sha512":"5b3dca7b9641164e6b5bf076aa1f9089e82961eb73fc5c4c21423a0f8b5c2e16085cdf75042242156e36eeb61c51e6cd80d78912361077f62750b1af06e20415","ssdeep":"384:+POqo1Yg+ZEYKJmYyoLDpiS2L86DaiEkR64A/+r3RyL3C38su9INSAK6MjDX4syv:KOTR+ZEYKUF+piL86aeRe/+r3RyC38s/","tlshash":"1fa2fad9fd0ada3ab5b209944598000035141feee52181d1b5fd1e0a1febe7e13afb2a","first_seen":"2026-03-12T16:55:22.798104Z","last_seen":"2026-04-15T05:45:13.341339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-9a6a5dc9.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-9a6a5dc9.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-593\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"b2c0a0cc945cb89cf466022af34f1e53","sha1":"09ccfd82eb75e2590f2ffa1fed3b7786c218fd3c","sha256":"6003c01736f7d50718c5c287059f788474debe9d23b75849215ada0e5c968a6f","sha512":"ea033598e556b3caec8382125d4ade834c0e72e7d48d9627dc63ed4c20d9542afc9451e7291fe9b6588a6afff5972924b99bbf259877c323561682ff923d72eb","ssdeep":"","tlshash":"e62183c9276acaf0896140768f25350132376007972fda86b6de7aa48f0c5c58a6a7bd","first_seen":"2026-03-12T16:55:22.807481Z","last_seen":"2026-04-15T05:45:13.303589Z","times_seen":7,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/w3m-modal-b1ff8ef1.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/w3m-modal-b1ff8ef1.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b44f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"939d5ed7952354468d68c7d0ad95cb4c","sha1":"f402c7b845087dcb86479606875bb6d6bcece0e4","sha256":"100384b853afc98771bbceb371f77e3cc0bd4d8a601c8363d1ea31035ccf941c","sha512":"542ed5bb829766a962245b5b32cd1aa40caf5ef780a8c68ffb6de057601ed8acb566afe514bf8b68f358fcb716b45645d92806b31753c13b4dfdf6592aefa84c","ssdeep":"768:mBEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:iCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"ae2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec51d58fd498869bf735","first_seen":"2026-03-12T16:55:22.864975Z","last_seen":"2026-04-15T05:45:13.325582Z","times_seen":7,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\ncf-ray: 9e46e5d80ed62efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 42407\r\ncache-control: public, max-age=31536000\r\netag: \"cfCUkmfLSHImn0WVCsJt7FCSUffmDcyauXnchu_YTSDQ\"\r\nexpires: Tue, 30 Mar 2027 11:50:38 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=9+3 c=0+2 v=2026.3.3 l=374 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a12155c6bad8cc78944c7bfee468b1","sha1":"3684a6988254eeebb4ee2df16fe1d053e07995b0","sha256":"09eafc5ea66462e38244d77d3c57b5f09a16d5de53ada131c1f847ecc869887a","sha512":"cbd356e3a836732175d690418bc1e48eb99cd9d673d21ca092ed1e6d698a9b69fac87072890f892af66375dc903af2c21e29ed31408114609861c059e1e48225","ssdeep":"","tlshash":"7ee0608a2235d2000ec0fb00682b20ab92ec3554bbf30930981aeb2204a7302e342ebc","first_seen":"2025-11-29T02:31:10.911784Z","last_seen":"2026-07-28T17:15:58.111058Z","times_seen":51,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":34,"connect":3,"send":0,"wait":34,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/if-defined-39ff01ec.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/if-defined-39ff01ec.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/receive-dd4142dc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 161\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-a1\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3eaeda4a4879e8acad1735fb4ccddd26","sha1":"76bebef49b1e07d9e23f7986d5585aa5f68cf2f0","sha256":"e283c993d87fdea0d861cbbe0f8d02c57ef0b02b6ccc41ac5acaad8589bd7858","sha512":"f332fc370abf5c75fc6637fc1c35e2875dae57cf0c777d829757045d6232ffb41bb0c6b8b52610ea43f08dac2fe5f21a1440e8df99bcfbe12a46b8841676e6b0","ssdeep":"","tlshash":"20c08c12a82901e34cda038ee864cd4e5020326e5f524282b0a8234688321805a9ec16","first_seen":"2026-03-12T16:55:22.81621Z","last_seen":"2026-04-15T05:45:13.309752Z","times_seen":7,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/HelpersUtil-2286d400.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/HelpersUtil-2286d400.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c7c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"2577c54fa41a9dccc6706936ab629516","sha1":"d5105a9b203ee4b0cdc9069dd68b0544ba269bb9","sha256":"f6a93469ee23f561dd26bc93951d314f6a434acb3e9b817491ffb09bc86e262b","sha512":"eb1f2486d459eb023d8356c141554814aae7108d7c38a0fcb9c4f5d7ed3eb8f97e10c3d0f6b792af317d68e9b355411b19ac6981892d63bf01fb1bd3c97cb114","ssdeep":"","tlshash":"6c6145c5f3fe7e26350704a999adc5106336702a291e9f3e7bed53f84f0af81a856520","first_seen":"2026-03-12T16:55:22.832602Z","last_seen":"2026-04-15T05:45:13.296679Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7a3\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-07-01T21:00:47.72394Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-4cb28ea6.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-4cb28ea6.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-141f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"fc565663046785c73279178fd07ee961","sha1":"432e3dd5edf33cc368847b9b160aa7bd91c20abd","sha256":"39f6d4dfe06a9415fc42e27f562fff81063da761a718a4624160b485482273fe","sha512":"188a59f70989b71c510977cadc2db23e3e72e08b527a87640d310dca088300f90bd2752f1c87502a08c55adab9c95bc2a50b3ec96db1ecf0199a440c672b966d","ssdeep":"96:vCz7IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:O8aa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"28b1a7d17190fcb7d739dacd406042e097ae57e07019c5deb15f9e03250acfc66eaa49","first_seen":"2026-03-12T16:55:22.831707Z","last_seen":"2026-04-15T05:45:13.335899Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-4cb28ea6.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-4cb28ea6.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-141f\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"fc565663046785c73279178fd07ee961","sha1":"432e3dd5edf33cc368847b9b160aa7bd91c20abd","sha256":"39f6d4dfe06a9415fc42e27f562fff81063da761a718a4624160b485482273fe","sha512":"188a59f70989b71c510977cadc2db23e3e72e08b527a87640d310dca088300f90bd2752f1c87502a08c55adab9c95bc2a50b3ec96db1ecf0199a440c672b966d","ssdeep":"96:vCz7IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:O8aa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"28b1a7d17190fcb7d739dacd406042e097ae57e07019c5deb15f9e03250acfc66eaa49","first_seen":"2026-03-12T16:55:22.831707Z","last_seen":"2026-04-15T05:45:13.335899Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d0518d72.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-d0518d72.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-12eb\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"3bd90731de83d6c59f377ef197bd6244","sha1":"e59af6e2d099541b9be9f6e525083256f4bcf1f5","sha256":"c6c6b988b51d40d0a6ef246c47bfb5dcf408448620ccf3e11eaf944ae978a0b5","sha512":"67b5b7f5fdc9b6f35a58e35a9b2f3972903654d3edceebf8daba0d0d2b01609f78e734f699497dd2f62d8d9b00f2296b1dda51cfc0e203a278b493c949ce8c23","ssdeep":"96:GdhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GdhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"d3a1c7f77167e7e0951747f5ccf73811611b3cb6bb064e0aa58ceac8de16184868ce10","first_seen":"2026-03-12T16:55:22.834443Z","last_seen":"2026-04-15T05:45:13.329394Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/ExchangeController-66fe4177.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/ExchangeController-66fe4177.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1279\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"8ece541558d1cfe3bbeb5d8fb963eea5","sha1":"0ac08983e14232d9e44be93da349f733d71935ee","sha256":"a661fb2f90f3b4cb26b0e1e2d1c55d750eee336cdc4aa4b6f0642ba6e5343800","sha512":"a33fd7000850094497467ce746958f79f66f790bca9ea329b0fd368b9db809a025b61b787a893988cf4e32f8f54170c3c1a000ba5b0ba8a520f8f26099d84fc9","ssdeep":"96:RvPMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvPM1gE2k+1ei+NFnopzo2Vvh","tlshash":"e5a19600b0f2703396d929a025752520cb6d4fe9a467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-03-12T16:55:22.810504Z","last_seen":"2026-04-15T05:45:13.324871Z","times_seen":7,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-60a89093.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-60a89093.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-814c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"0b9d0bca352e5221a19406ecf3d0910f","sha1":"7b8db0102584b40289de1c8c003219a13f5fc8a1","sha256":"1ec0d15d6e4db8c4e8aad4c4c73b17befe3c1961631b9bda39a3c42087267e68","sha512":"0dd5fb1b30a765748570d9309e8038286eb566dc00eeeeb7b8c0ea177cf475edbf9c494a6f39d642ff95eaf9ce4150ae06341893d1eceeae2943dd46ac583d06","ssdeep":"768:XCzlkEh6WjzDJ/NCYUV6Xi7QMR+gXPJjNHe7DGls4+DBL+FUytuLUed:Szl5h6kwViiPRFRjNHe3Glr+lKFDcX","tlshash":"14e2f7c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-03-12T16:55:22.811651Z","last_seen":"2026-04-15T05:45:13.347632Z","times_seen":7,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-0944fcc2.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-0944fcc2.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19ab\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"b32e02ff4612b55b84ae058268999916","sha1":"fad1adda138cdd7a63f8b54fc5576a0b2c4de283","sha256":"56a4f536e7bac1aabea2a016ff2595143fde4eafdc144794c87b3b7627d094a9","sha512":"0158731a385a91437b2954c923e2ba10addba9667c668ee7cac6b0bf040218d12fdd15d274aeea7f3128c8684fde19b4cfdf7da08d1f2463db9e837ecf01d7a7","ssdeep":"96:wZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:wZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"ded1b5bf3d666415a632c0a58b928c04d131901757088c79b7fd19a8cfcea89766f764","first_seen":"2026-03-12T16:55:22.837675Z","last_seen":"2026-04-15T05:45:13.382489Z","times_seen":7,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 69\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-45\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-08-07T04:52:15.520576Z","times_seen":137,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-d90b3301.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-d90b3301.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bb2\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"8c674da81682dddf5a26601684c71665","sha1":"ffab90e19b3e776309f73b6d2bc84f8794ef833e","sha256":"791a8e9aeb19cc2459a8ef12619ae653d77216a3dfd33bdf6fdcb0f2e489bfe1","sha512":"e3289b8c81428fa5f21958a048f9eb4d902e2a56b4236831d400a85a7cceff2bd5e6821783cc60ef06b149bc731c9fff42738099b4631dfc0ea25937825ab432","ssdeep":"","tlshash":"af51fdc1ffa8a26ab70bc1bd155ad914e333f00540295f7f7bca12f14f5d584241eaa4","first_seen":"2026-03-12T16:55:22.820744Z","last_seen":"2026-04-15T05:45:13.331089Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/favicon.ico","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/","date":"2026-03-30T11:50:35.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:35 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"68eee8e1-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-08-07T02:09:27.83228Z","times_seen":13762,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-60a89093.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-60a89093.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-814c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"0b9d0bca352e5221a19406ecf3d0910f","sha1":"7b8db0102584b40289de1c8c003219a13f5fc8a1","sha256":"1ec0d15d6e4db8c4e8aad4c4c73b17befe3c1961631b9bda39a3c42087267e68","sha512":"0dd5fb1b30a765748570d9309e8038286eb566dc00eeeeb7b8c0ea177cf475edbf9c494a6f39d642ff95eaf9ce4150ae06341893d1eceeae2943dd46ac583d06","ssdeep":"768:XCzlkEh6WjzDJ/NCYUV6Xi7QMR+gXPJjNHe7DGls4+DBL+FUytuLUed:Szl5h6kwViiPRFRjNHe3Glr+lKFDcX","tlshash":"14e2f7c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-03-12T16:55:22.811651Z","last_seen":"2026-04-15T05:45:13.347632Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rYhr6sAbi8PHyt/slxsRBIgOzJngE9gGm89UP3qyTUZ6k0GQT2GSadERHFsm6ihEJycuCWJG+LBy41H9RzM6mQzJEKBz+1yD\r\nx-amz-request-id: NN0CJGWJKWYXD60Z\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.090037Z","times_seen":545,"resource_available":false,"data":null}},"time_used":1543,"timings":{"blocked":624,"dns":40,"connect":267,"send":0,"wait":285,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ordi.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ordi.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BsXcHzWN6lKOs40Oc9IvnFEKRM1ZJBa7TgQ6zuhcd5BpSbhrYmDfbFUSvQDH2T5urPoJutKOjUIDeso79HWbY7YrmMJZw7gr\r\nx-amz-request-id: NN0FWXC51H5J7356\r\nDate: Mon, 30 Mar 2026 11:50:40 GMT\r\nLast-Modified: Sun, 30 Apr 2023 12:50:40 GMT\r\nETag: \"be20ec57e8a4aa7b2a338e48acdce782\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3560\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be20ec57e8a4aa7b2a338e48acdce782","sha1":"141496897f907d601a749439a82ad40d805b2294","sha256":"35dc8d4477166c6aac8a1e3635443f93eddcf22f95f297aeda99b6e453923205","sha512":"43ba6eaa071f9abd823afe2c47cfd814fef95a73f89f3eaaa13fcf1589c5787bb2656a0018a394af52925b6063fd5d772d21bd5e99c5d3fb9797c538994b0bef","ssdeep":"","tlshash":"e771b5d452ad91e2fc43d3d6dac2115a787260a92acb8064f6ec5257af390eb4407394","first_seen":"2025-06-19T20:00:31.917814Z","last_seen":"2026-07-24T06:14:46.31516Z","times_seen":152,"resource_available":false,"data":null}},"time_used":1555,"timings":{"blocked":623,"dns":40,"connect":273,"send":0,"wait":297,"receive":1,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:38.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7a3\"\r\nexpires: Mon, 30 Mar 2026 23:50:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-07-01T21:00:47.72394Z","times_seen":28,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7846,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3e55295bde2312150687e9fbfe0e7e66","sha1":"3294344feacf72870a8a7256a8f7b0d5975f95e5","sha256":"d2ff293488c727d17f399decc9fffa8f7ea0124cd9fc4942929ac07205acc67f","sha512":"bb6066dab49145cb6a989b62d767cd04148ba91d56138e1a2425e75c7097130a5c50047870b6694e5c358db92fa7ed2f6ff655cf0ad38d1c703e9b1c4644f472","ssdeep":"192:DMdKb9mgL5hEVnJxV4JGt7FbUR/xZviWIUe:wS92VJfJgw","tlshash":"40f1db156b714bafc525a0c21cd23bdc486f25a62cd60b42a1fe9d9e8314dee3123726","first_seen":"2026-03-30T11:51:07.890505Z","last_seen":"2026-03-30T11:51:07.890505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-c28c205a.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-c28c205a.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-162c\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"40e152d7e754dc63fde36d1b623d9ce4","sha1":"fb8669015d6e5c3fc5094f46040cedf0f10865b9","sha256":"5a087037eee74c54ab329bad9bcf20e19e61e7298e9fa03b2aa7d6fcb377ea5c","sha512":"dbc3d1ca6bde2f174605de886ed7b4568d09628fcafe67fe0f353f935cb16e41caa68982f91e3236066f2b88c868dbb419a5a4d061db7f6c5fe5994e31cb2feb","ssdeep":"96:eo2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:32ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"03c144d5bdbd2e7b3517c028e16e86a4e334b0279424df3e77ac61f88f59942181c931","first_seen":"2026-03-12T16:55:22.817029Z","last_seen":"2026-04-15T05:45:13.336651Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/ExchangeController-66fe4177.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/ExchangeController-66fe4177.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1279\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"8ece541558d1cfe3bbeb5d8fb963eea5","sha1":"0ac08983e14232d9e44be93da349f733d71935ee","sha256":"a661fb2f90f3b4cb26b0e1e2d1c55d750eee336cdc4aa4b6f0642ba6e5343800","sha512":"a33fd7000850094497467ce746958f79f66f790bca9ea329b0fd368b9db809a025b61b787a893988cf4e32f8f54170c3c1a000ba5b0ba8a520f8f26099d84fc9","ssdeep":"96:RvPMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvPM1gE2k+1ei+NFnopzo2Vvh","tlshash":"e5a19600b0f2703396d929a025752520cb6d4fe9a467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-03-12T16:55:22.810504Z","last_seen":"2026-04-15T05:45:13.324871Z","times_seen":7,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakex3.vip/static/js/index-dc6c0f23.js","fqdn":"krakex3.vip","domain":"krakex3.vip","tld":"vip"},"ip":{"addr":"212.227.240.4","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakex1.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 12:04:38 GMT","end":"Thu, 14 May 2026 12:04:37 GMT"},"fingerprint":{"sha1":"09:28:70:DD:72:91:BA:E9:0F:EE:A6:6D:42:96:5A:29:91:BB:85:65","sha256":"28:2C:18:14:3A:ED:82:93:9B:23:5B:3D:34:24:B1:1B:A8:4E:82:B9:95:13:AE:E9:97:9C:4D:E2:BE:F1:29:B7"}}},"request":{"raw":"GET /static/js/index-dc6c0f23.js HTTP/1.1\r\nHost: krakex3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakex3.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 11:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b3df\"\r\nexpires: Mon, 30 Mar 2026 23:50:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"34d4b40271d601275b4110dfeeae6f06","sha1":"8dc4be576be03d1321365f8e76eaceb6351ea1cc","sha256":"d6f2a417c26b0a4b457a8dfe02f13b7e478e6454b8698f7bec40706985576454","sha512":"eeed29ae3ed96b20ec5f0536081f1fc3a68d989c4c621178b9d467b034aac1f443ec12e5cd864d939d4d37fdad5d2f35bbe42586ff9fd31595e70738f9b09169","ssdeep":"768:1PYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:9+qIzcUWb67sHYbzyER","tlshash":"3723b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a719b1618edd6bcda","first_seen":"2026-03-12T16:55:22.83672Z","last_seen":"2026-04-15T05:45:13.362208Z","times_seen":7,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"krakex3.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakex3.vip/index.html#","date":"2026-03-30T11:50:37.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakex3.vip/\r\nOrigin: https://krakex3.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 11:50:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9e46e5d7fbf2b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-08-07T02:27:01.920074Z","times_seen":825,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":117,"dns":30,"connect":8,"send":0,"wait":44,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}