{"report_id":"fdcdd0a7-2a09-40df-b6bb-8d97cf4cbf84","version":6,"status":"done","tags":[],"date":"2026-03-28T02:59:26Z","url":{"schema":"https","addr":"at-krab4--cc.ru","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":0,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"final":{"url":{"schema":"https","addr":"at-krab4--cc.ru/","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"title":"krab4 cc - Новая cсылка","dom":{"size":4809,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1ea30cfebf2bcec92dcea2cdc5677bdf","sha1":"a59280b4be2a9c913d94ce2e8954ae976265e17d","sha256":"545dde2a5c99b7276c635e41e40b77bd67e179f3e3734bc2b1dccbb0eff29ef5","sha512":"d46f4f9a1508ad882e725729af04955649b98ef52c0858b6b2a52b1c17b5f5973f3fd01ad781c7940641d98128da2a1573da12b5d4a1f855caab505cd1ef362b","ssdeep":"48:nKnL/NvNpmq3pm7JQMYc74tr/dEjOThMRoF/8aZ9HVw/WJlQAqFsejr:nELNnA7iM21lEjOThfZZdyu7qFsejr","tlshash":"b1a1745745a704153942d8743fdbaa56569c8023c209dca87fcc22ac8fcb6c4d6f3b8d","dom_hash":"domhash19c5270bec8c984f2eb2aed8bdd322a0","first_seen":"2026-03-28T02:59:29.321671Z","last_seen":"2026-03-28T02:59:29.321671Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"at-krab4--cc.ru","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":0,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T02:59:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"at-krab4--cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"at-krab4--cc.ru","ip":{"addr":"45.150.39.217","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-28T02:59:26.438069Z","last_seen":"2026-03-28T02:59:26.438069Z","alert_count":5,"request_count":5,"received_data":27438,"sent_data":2483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"at-krab4--cc.ru/antibot_generatecaptcha?qWdS7EPSuj","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://at-krab4--cc.ru/","date":"2026-03-28T02:59:05.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"at-krab4--cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 17:24:57 GMT","end":"Thu, 11 Jun 2026 17:24:56 GMT"},"fingerprint":{"sha1":"FB:37:99:40:A2:0C:FE:B9:D3:D7:28:81:6D:6F:EC:55:52:E0:34:97","sha256":"49:77:4F:43:E9:47:23:67:73:B7:E5:85:A8:09:6E:B2:6C:B0:6F:39:B2:5D:F5:7E:73:84:B9:A8:5D:E3:F6:27"}}},"request":{"raw":"GET /antibot_generatecaptcha?qWdS7EPSuj HTTP/1.1\r\nHost: at-krab4--cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://at-krab4--cc.ru/\r\nCookie: antibot=0e99fa88-4979-48dd-97dc-2c0aaf4837c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 02:59:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11466\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: no-store, no-cache, must-revalidate, private\r\nExpires: 0\r\nLast-Modified: Tue, 06 Jan 2026 17:09:59 GMT\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Blender:File:C:\\Projects\\captcha\\captcha-3.blend\", comment: \"Blender:Date:2023/02/15 01:42:48\", comment: \"Blender:Time:00:00:00:00\", comment: \"Blender:Frame:000\", comment: \"Blender:Camera:Camera\", comment: \"Blender:Scene:Scene\", comment: \"Blender:RenderTime:00:00.07\", baseline, precision 8, 380x120, components 3","md5":"a02f5d50c6457f4b42586273c945f032","sha1":"67fe4be5944253250be13a1af89154dc844c29b3","sha256":"c563524a069f3679c6ab394366e68e06e0f61d04227b77354ab990e1842bc3b4","sha512":"cb1ac618c82576a3d814adcc295a6f203704e51d709504528c69f326b6b8ca536a7014201e6a89d58b2d060e1cc1e9f3977c2db93ac111ad4f423fe15ab6d01b","ssdeep":"192:csyWGPs0wgLp/8mL1K7tYi2tibJKGbKheobHx+1cVWYnpYy0iFUmjjcfCfVcrzjO:fyZkgL5jQ2tib8tR+vm0iFN08cry35","tlshash":"8932bf7bd45c3170e52c63fbbc4c559ab2844a47e86e13863aab4e3bcdd12fee055142","first_seen":"2026-02-10T23:04:38.419512Z","last_seen":"2026-03-28T02:59:29.323962Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2750,"timings":{"blocked":1280,"dns":1,"connect":52,"send":0,"wait":183,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"at-krab4--cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at-krab4--cc.ru/favicon.ico","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://at-krab4--cc.ru/","date":"2026-03-28T02:59:05.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"at-krab4--cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 17:24:57 GMT","end":"Thu, 11 Jun 2026 17:24:56 GMT"},"fingerprint":{"sha1":"FB:37:99:40:A2:0C:FE:B9:D3:D7:28:81:6D:6F:EC:55:52:E0:34:97","sha256":"49:77:4F:43:E9:47:23:67:73:B7:E5:85:A8:09:6E:B2:6C:B0:6F:39:B2:5D:F5:7E:73:84:B9:A8:5D:E3:F6:27"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: at-krab4--cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://at-krab4--cc.ru/\r\nCookie: antibot=0e99fa88-4979-48dd-97dc-2c0aaf4837c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 02:59:06 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5003,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"95baf9bf99163b0841b33fc5dbc3f18f","sha1":"7ef23de23b93678055483e662308867a543c6667","sha256":"f33d6ab8cd3dc5c5be3ca7f93be03150519789d66b6fc6d1ffead0938ab81170","sha512":"ffcf395dbf89ca96690d26d7c4d90dd8439ee12e493b318cc535e60ec04ef272f67d0dbb18d32a4b9a2a6178b78b83ce766a19bb74f87f05ea6808c7349f2e8c","ssdeep":"48:tfHLvNeN8yrpW8qQMYc74RHEddIjPaKow5KX8zXtiXttPIv4WBf3P:tLByQ83M2+LIjPaKRPXMC4WBPP","tlshash":"ffa14221c5461805317296747f92aaa5eb894173d30551a87fdc33ab4ffba98c2a3fcc","first_seen":"2026-03-28T02:59:29.324658Z","last_seen":"2026-03-28T02:59:29.324658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1147,"timings":{"blocked":971,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"at-krab4--cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at-krab4--cc.ru/","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T02:59:04.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"at-krab4--cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 17:24:57 GMT","end":"Thu, 11 Jun 2026 17:24:56 GMT"},"fingerprint":{"sha1":"FB:37:99:40:A2:0C:FE:B9:D3:D7:28:81:6D:6F:EC:55:52:E0:34:97","sha256":"49:77:4F:43:E9:47:23:67:73:B7:E5:85:A8:09:6E:B2:6C:B0:6F:39:B2:5D:F5:7E:73:84:B9:A8:5D:E3:F6:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: at-krab4--cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 02:59:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: antibot=0e99fa88-4979-48dd-97dc-2c0aaf4837c4; Path=/; HttpOnly; Secure; SameSite=Strict\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5003,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"db2f7d55fa5a87d96a5696661c4ca51c","sha1":"ff1914a019a208484c05e4a09c87a9588b8fc34d","sha256":"59c1b8a1df2119741fe207ac16b6f15f980aa422fb0972ab16b4407bb6b113d2","sha512":"aab99cc3bd67c14b2c66146bfa6b0827e9299b32caf2324c2091f203536e592d361267b16a0789402560d81d5a36954fc6069125db5777e788f756dbe695ab83","ssdeep":"48:tfHLvNeN8yrpW8qQMYc74RHEddqjPaKow5KX8zXtiXttPIv4WBf3P:tLByQ83M2+LqjPaKRPXMC4WBPP","tlshash":"82a1312181461805317296747f92aaa5eb894173d30551a87fdc33ab4ffba98c2a3fcc","first_seen":"2026-03-28T02:59:29.325912Z","last_seen":"2026-03-28T02:59:29.325912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":200,"dns":44,"connect":50,"send":0,"wait":134,"receive":1,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"at-krab4--cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at-krab4--cc.ru/antibot_assets/css2.css","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://at-krab4--cc.ru/","date":"2026-03-28T02:59:05.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"at-krab4--cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 17:24:57 GMT","end":"Thu, 11 Jun 2026 17:24:56 GMT"},"fingerprint":{"sha1":"FB:37:99:40:A2:0C:FE:B9:D3:D7:28:81:6D:6F:EC:55:52:E0:34:97","sha256":"49:77:4F:43:E9:47:23:67:73:B7:E5:85:A8:09:6E:B2:6C:B0:6F:39:B2:5D:F5:7E:73:84:B9:A8:5D:E3:F6:27"}}},"request":{"raw":"GET /antibot_assets/css2.css HTTP/1.1\r\nHost: at-krab4--cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://at-krab4--cc.ru/\r\nCookie: antibot=0e99fa88-4979-48dd-97dc-2c0aaf4837c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 02:59:05 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 19\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T06:51:57.885213Z","times_seen":17867594,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"at-krab4--cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at-krab4--cc.ru/antibot_assets/kraken.css","fqdn":"at-krab4--cc.ru","domain":"at-krab4--cc.ru","tld":"ru"},"ip":{"addr":"45.150.39.217","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://at-krab4--cc.ru/","date":"2026-03-28T02:59:05.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"at-krab4--cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 17:24:57 GMT","end":"Thu, 11 Jun 2026 17:24:56 GMT"},"fingerprint":{"sha1":"FB:37:99:40:A2:0C:FE:B9:D3:D7:28:81:6D:6F:EC:55:52:E0:34:97","sha256":"49:77:4F:43:E9:47:23:67:73:B7:E5:85:A8:09:6E:B2:6C:B0:6F:39:B2:5D:F5:7E:73:84:B9:A8:5D:E3:F6:27"}}},"request":{"raw":"GET /antibot_assets/kraken.css HTTP/1.1\r\nHost: at-krab4--cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://at-krab4--cc.ru/\r\nCookie: antibot=0e99fa88-4979-48dd-97dc-2c0aaf4837c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 02:59:06 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 4768\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 06 Jan 2026 17:09:55 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4768,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"75fd64fc8e99dc317f41914081a03352","sha1":"97c20a567cf31b997322b3228838ae44b1394233","sha256":"db6ad8d74f75b4ec10be88cbf8dcf0134d1f63f7126accf2b375a0833aba0028","sha512":"9b8c26c9e7b3ca6fbdd5337dbbe2a6bfa06cb476355406f010cf4ea09438a406c804f5c56577e7b68b11870ee8fedb397ffd11a72ab2036c5485175779aafc99","ssdeep":"48:W3AtE0JlzWvwIpQnStqoemMHmGmRm6iRtmQmHxa9uuuma86cPBmJz9K+N3z+0hCK:/zGwIU2jMxALy63zD2s5","tlshash":"78a1df9e16022b5083324f3463979b15b72402768e4530edb8d04ab9eb96be686d0fcf","first_seen":"2024-09-22T02:59:45Z","last_seen":"2026-08-06T01:59:14.026636Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":153,"dns":1,"connect":49,"send":0,"wait":1128,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"at-krab4--cc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}