{"report_id":"21c283bc-1b2e-49c2-b9d2-98c1c4c10b2d","version":0,"status":"done","tags":[],"date":"2026-07-30T02:04:01Z","url":{"schema":"http","addr":"nekoocraft.com","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"title":"NekooCraft • The Cutest SMP","dom":{"size":78152,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28310)","md5":"c20e2d2fec283adb45b2e20a42c41462","sha1":"41dd74f3aebb1bc56368fc9e5ce0ae2980fda97e","sha256":"16da05b62a4cdca970474493b5cc8dd0180008471ad20b5c2806efc2f1a92386","sha512":"18c6f86e1dc478cdb3dfc78a794686e38d0099e08e59aebf708e6b6ac3b8687ead13efa2a7a3a57b0f14bc9cd03c739bce9de340b915987c9dd5adb738a6ab73","ssdeep":"768:V4SxoRQ+bBkhnLLOl3Za+WbQd1NToV6hjslygk2lOLxPxexPsOxbRYytJoQrw1tc:+SGRQ+bBkhLLOl311/0OV5CPs8O8SlO","tlshash":"4673f73a22f1103f2957c1f1e191bb5dfa2ae387da1b86aeb19c06506fc7de54d27204","dom_hash":"domhash582235b2a1ba555ba48471b52d7bac0c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nekoocraft.com","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T02:04:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"res.cloudinary.com","ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2026-07-27T23:22:44.096674Z","alert_count":0,"request_count":6,"received_data":24223720,"sent_data":3595,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nekoocraft.com","ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":12,"received_data":658702,"sent_data":5699,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"IPinfo","description":"IPinfo is an IP address data provider.","website":"https://ipinfo.io","common_platform_enumeration":"","icon":"IPinfo.svg","categories":["Geolocation"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":4,"received_data":34770,"sent_data":2224,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":6677,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-27T08:40:23.885085Z","alert_count":0,"request_count":2,"received_data":511556,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-30T04:05:42.487673Z","times_seen":90660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/disable-devtool.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bd2bd352f1512a937ff89386540794b","sha1":"460cf292d001b29e5814f0e33dca1937576a809a","sha256":"f7fb109b9b9819ca9f9c7dfe90cd05587fbed5494b7da1189c13ce96534e84de","sha512":"0aa9e6e3e6fd17360e05b9e709b9e6cbecb0fac0e8f28eff4f5066a0d70c31cfc6c3e79d1fa23c9eb4ef0ec419dd426e9540c9ca49af50c95f3e3aaf29cfdf41","ssdeep":"192:mT5kNDJeJwFLrlxbQJbjugelGBPfyxXWZbxgb2D+5QisdGMSpmt4mhEyyP:mafeJwFHLbuj9l8MGbz5QtD4mbY","tlshash":"1452b78cb98274701777a6a8243f150ab239695a848c9050b33d4bf82d78d6ec367f7d","size":14114,"data":"","first_seen":"2026-07-30T02:04:09.063113Z","last_seen":"2026-07-30T02:06:27.154054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8e95e90946608b3a8b50e20d646d96f","sha1":"5dddaf259c62a467de6ef04d2cd70151cd0938b2","sha256":"ca9e59a439ff31e5454ae01ee0a6ccdbb9312d1ca91022ac1aba973bb347ecdd","sha512":"c5e38f175d0a62f4282aef49bf5b03b819ee3c79e62f79c26e45a0659f59fc0ec0df5e797201af1d007dc57fd48a47f6aacd346a6371109d4a5c41f56eedc41b","ssdeep":"","tlshash":"5de0260b95b56b13a513a074a15b080252f1018b5e3d3c7ebf0c52020b1d61c69b075e","size":414,"data":"","first_seen":"2026-07-30T02:04:09.065049Z","last_seen":"2026-07-30T02:06:27.164626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"340e27d30c1db0e7d5375b0827f116e8","sha1":"1c48d9dd818d6db3b32f55ac4c7a3878ce068341","sha256":"22490eaecf5431afb23541965de27a508b2ddff3a26948040810c9c96d154fbf","sha512":"056e97af1764298e5bbd1a74614976566e4b8c0f3b1e712e796c7784ebfbc06e91cc5cdcd1d76885fbde37aba5b5c23f493e6f2d25eeeb62f7ae84e638769f85","ssdeep":"","tlshash":"1571ef6fb2fb143580ff266b33e7d748323160476445c9193e9c9a885fd5a8089aabd4","size":3647,"data":"","first_seen":"2026-07-30T02:04:09.065993Z","last_seen":"2026-07-30T02:06:27.165236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d7d37b8835852687ec40be5fae8cce6","sha1":"f39f93a79de4d3a794c4c9653b83ef152f8d7524","sha256":"600eaa4dbb294b12ec9e59c09a40754bff8b7b4debda4a85fed0d190520535c8","sha512":"5f9b27841a96721ba18ab63b96bbc672dc9bb756995080043b263642e0f2e95deb70fe77d81cc8c93cdb7494599bc9870a356dbb43505714a30884a6670ba82a","ssdeep":"","tlshash":"f901cb0ea3f73165406bb26a5b23f309a320e1233406fc1d7c0d82009fb69b399a6f5c","size":806,"data":"","first_seen":"2026-07-30T02:04:09.066967Z","last_seen":"2026-07-30T02:12:54.334079Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-30T04:20:55.311784Z","times_seen":735394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/zzz.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c738ef21c3b24f63f96d123a6c012f53","sha1":"d266e8aea1d0434e62b3045b59ea31a1a2c64879","sha256":"c2ff698dd7f01ef05ce57c6d223fc7ac95843912f2ae53396dc11acae0ed844b","sha512":"a402ccd12092e87bf681b69384cf0e0617c09aff68fccbc2c04460c6e4a4ad0d2929dfab14727cbee67d8a01a900af27f3b72092cef52bfb49d91b62b5f8a3d1","ssdeep":"","tlshash":"745133da7980a540736b8fc73f3ba0d6d91ad8173d650a4e85047a9a7cad2a0c0edd71","size":2929,"data":"","first_seen":"2026-07-30T02:04:09.061266Z","last_seen":"2026-07-30T02:06:27.153478Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c423257ce6bde1851c335e8f8f4e9bb2","sha1":"034de0a189bd5e766accc1122ab3a53d53c23cc4","sha256":"0656b912a5893ab56c590ef7e1edd2c9ae57bbff18b30a300cdd66f3f1486708","sha512":"a21bcd7fbf9351dd93a98f4d5d170224d0e7df81cba9da8da1c2cb354257c38d188c1f3c34d929c9783f5cc1389c0e720d268d357efba89a99a3980c48c463d5","ssdeep":"6144:LFQUPEz0+19zXEVy61LLeMP5mqNFPyF2pH7w2nXrPO0s:ZQUPEQSzXEVy61LLn5/CSbHbPO0s","tlshash":"22b43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","size":510091,"data":"","first_seen":"2025-09-21T16:18:40.255776Z","last_seen":"2026-07-30T02:17:33.499316Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-30T04:27:18.916723Z","times_seen":236533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/app.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1a0970815399f5c3b5f69ecdaddbfc8","sha1":"9646a65b52a383485ea88baf133fa7c60b73c184","sha256":"3104e7dd447d44cbe6901a0b6b386099be05c79f062000674578f8b0380b0334","sha512":"d326da9a2f83eedf02574570e88b2709e350e43da41ffc2cd8f574619973255d0ec0f7294356489ad07c4046afa18d0362cda709898f560fad2aa0048569fac3","ssdeep":"1536:wQ9HnMF1F/crtexxE4u13KVeldMDec7wkjddmIlOj8Z:wHFT/U8xx+dxDkLmsZ","tlshash":"bb83704473d0a882a34b5ef73207b4d6d84a08be31a88667d548bca8b5e3737f4f5635","size":85504,"data":"","first_seen":"2026-07-30T02:04:09.056927Z","last_seen":"2026-07-30T02:06:27.157256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/main-script.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b313e0c80243509d5e82c017023ad262","sha1":"777b6afe65d359b48ee2a93fc1a924cfd22425d7","sha256":"047ccc0484d34d29c8e64d90583f909aacf9a6fbea8230be1bcc2fc1dbcb16c0","sha512":"b02c2d2397c1c84288d712955037215e8fb6e49bc9149c8b621dc1fd52561817c47454d7bea6958044dc8f75f5697156631b4b078e69a10ed192ef05f0668b86","ssdeep":"96:GXp/Z//t9o8r844tcO6KSwFpG9ENhkurzRHi5NnNYzjCcWwPS/u6dY+8VeJuA:mxH7o1c9K9pNnfC59WKlqlA","tlshash":"739174405b003ad977575b933322b4a8fe2e6dfefa8005c78308758c69a5670dfc56ba","size":4506,"data":"","first_seen":"2026-07-30T02:04:09.051556Z","last_seen":"2026-07-30T02:06:27.162491Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/?plugins=forms,typography","line_number":66,"column_number":26105}]},"http":[{"url":{"schema":"https","addr":"res.cloudinary.com/dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:36.174Z","timestamp":1785377016174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 18 May 2026 19:39:12 GMT","end":"Wed, 02 Dec 2026 19:39:12 GMT"},"fingerprint":{"sha1":"43:CA:41:22:01:8A:96:3F:29:27:D4:08:C5:92:11:7C:92:47:81:40","sha256":"96:C4:64:21:BF:0E:2E:04:1E:3C:DB:DB:13:EA:A3:11:5F:80:8B:22:5B:B1:14:5D:A1:E5:BA:DA:18:F3:4E:5F"}}},"request":{"raw":"GET /dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4 HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://nekoocraft.com/\r\nRange: bytes=196608-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Thu, 30 Jul 2026 02:03:36 GMT\r\ncontent-type: video/mp4;codecs=avc1\r\ncontent-length: 11315159\r\ncontent-range: bytes 196608-11511766/11511767\r\ncf-ray: a230c9af194576ef-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\netag: \"5264bdd775d3d47263d244ba1d38022c\"\r\nlast-modified: Tue, 17 Feb 2026 14:27:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800\r\naccess-control-expose-headers: Content-Length,Range,ETag,Server-Timing,Content-Range,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=4;start=2026-07-30T02:03:36.174Z;desc=hit,rtt;dur=2,content-info;desc=\"width=854,height=480,abps=184029,fps=30.0,du=62.554,vc=\"h264\",bytes=11511767,format=\"mp4\",crt=1771338445,o=1,ef=(18);\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 9620dee6c67c0c8996f0cdb15001a71a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11315159,"size_decoded":11316080,"mime_type":"video/mp4","magic":"data","md5":"f6f98350914b6d5474a7ab085e70407d","sha1":"e8bf2b2bb644848940019f1d0a40b62328064627","sha256":"655fdeea17f22e99ad022d82b3dea2fda1901a85b4c8c6033bcaf8ec1276cdb2","sha512":"aabc181e8f8dccdbadfb75deb5c0407a06f36257f00433c8b2469512f6ca3064c3c3da9686cc2fb1fb7b3b213fc7b7feef554ce7f2b03af88d0b1dd7756896f6","ssdeep":"24576:AJ0ZKaFxKwnhX3IQ6cwJKg+0AG9vmNNULAZh68B2CnaF7rtpGK/3cRx:AJ0HFxKmWcw9+ZGhmrUL868MCni7XGKa","tlshash":"1c2533e6835e17dc519356bea20a70d5d4728b588a207f03f8fc91a107d8dfa1ef96c8","first_seen":"2026-07-30T02:04:09.050534Z","last_seen":"2026-07-30T02:06:29.000176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/main-script.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.444Z","timestamp":1785377008444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /script/main-script.js HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAHmRCCeG0C8v56pH6ySh2HY4e%2BhRj2Bddii9R4UT2YG74tzE%2F%2F9%2Fu5T3Vj7c%2BvFVnXHV7eEaFR8o05I1ruDVSi0%2BjvfP9uFwpr6XyuyVBFFdIIyELOZ4h8XGJd%2B5n2Oow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8cd85e8792249b16596734f6707f3490\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97ecab649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4506,"size_decoded":3045,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4501), with no line terminators","md5":"b313e0c80243509d5e82c017023ad262","sha1":"777b6afe65d359b48ee2a93fc1a924cfd22425d7","sha256":"047ccc0484d34d29c8e64d90583f909aacf9a6fbea8230be1bcc2fc1dbcb16c0","sha512":"b02c2d2397c1c84288d712955037215e8fb6e49bc9149c8b621dc1fd52561817c47454d7bea6958044dc8f75f5697156631b4b078e69a10ed192ef05f0668b86","ssdeep":"96:GXp/Z//t9o8r844tcO6KSwFpG9ENhkurzRHi5NnNYzjCcWwPS/u6dY+8VeJuA:mxH7o1c9K9pNnfC59WKlqlA","tlshash":"739174405b003ad977575b933322b4a8fe2e6dfefa8005c78308758c69a5670dfc56ba","first_seen":"2026-07-30T02:04:09.051556Z","last_seen":"2026-07-30T02:06:27.162491Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:29.033Z","timestamp":1785377009033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nekoocraft.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:57:12 GMT\r\nexpires: Fri, 23 Jul 2027 02:57:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601577\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-30T04:15:59.346859Z","times_seen":385190,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.434Z","timestamp":1785377008434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Jul 2026 02:03:28 GMT\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":1243,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4b874a96c6e11344f7b1939c38f87e2","sha1":"15879e821b5dda4854585c17a9bf43d5c8eaf8b5","sha256":"7e933b9d624b6b5f720d276780008035bcf7ba564403d931532059e9041e8bd1","sha512":"0b3488b90e5a4f635cd59b2c2d5bcb018b5bd377e0e00cd095d33fbb81d0f84f62429485639ecba7d0e2bfeebffc6544ae19ff7e02221a257f7e7cad1edacbe5","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpE:lgKQcXr3lVwa3RzJ/apsn","tlshash":"3cc19cd1087be114ab871cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-20T07:37:39.957294Z","last_seen":"2026-07-30T03:42:46.929508Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/logo.png","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.449Z","timestamp":1785377008449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZuLvtj5p5R5WbgXQnVTwRUzZYpexzo57nBnMH2WaYIklRKTO8HH5ssucUWRTAKYvBFzznie4kt7RTkLXQ%2BSkmcXNuNai%2BOzISWpWZGT90svllfhzzK6ciJiRNV7Vuxv3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1c88223d3b2954109ba26a463fb518b3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\naccept-ranges: bytes\r\ncf-ray: a230c97ecab749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125633\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125633,"size_decoded":126436,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-07-30T02:48:11.71225Z","times_seen":63,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:31.412Z","timestamp":1785377011412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 18 May 2026 19:39:12 GMT","end":"Wed, 02 Dec 2026 19:39:12 GMT"},"fingerprint":{"sha1":"43:CA:41:22:01:8A:96:3F:29:27:D4:08:C5:92:11:7C:92:47:81:40","sha256":"96:C4:64:21:BF:0E:2E:04:1E:3C:DB:DB:13:EA:A3:11:5F:80:8B:22:5B:B1:14:5D:A1:E5:BA:DA:18:F3:4E:5F"}}},"request":{"raw":"GET /dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4 HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://nekoocraft.com/\r\nRange: bytes=11468800-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Thu, 30 Jul 2026 02:03:31 GMT\r\ncontent-type: video/mp4;codecs=avc1\r\ncontent-length: 42967\r\ncontent-range: bytes 11468800-11511766/11511767\r\ncf-ray: a230c99178c576ef-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\netag: \"5264bdd775d3d47263d244ba1d38022c\"\r\nlast-modified: Tue, 17 Feb 2026 14:27:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800\r\naccess-control-expose-headers: Content-Length,Range,ETag,Server-Timing,Content-Range,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=5;start=2026-07-30T02:03:31.434Z;desc=hit,rtt;dur=4,content-info;desc=\"width=854,height=480,abps=184029,fps=30.0,du=62.554,vc=\"h264\",bytes=11511767,format=\"mp4\",crt=1771338445,o=1,ef=(18);\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 9620dee6c67c0c8996f0cdb15001a71a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42967,"size_decoded":43887,"mime_type":"video/mp4","magic":"data","md5":"c3523efc36f9c9d4ab0a08266a80965e","sha1":"308369075553763e2b1e875a40e7bde562193440","sha256":"96946d388e22039ebb1d02bdd55bd3f3aed791aec321e0411d2a199215730e25","sha512":"36c7d540789c5136e02e3c8abed27a461fac94d690bd06a426d71f439558f89b9b21ce744c308e93394b3802713bb4665523a49389f0fc1c6d0671319abf3f7c","ssdeep":"768:D/56acn2VFC03r44lnuQROT6C17XYftlit4PZ9jQ5Y:zcaFtUUQAifY","tlshash":"96134a9327226723c2112a7cc4fb13057370da8adbe79797da81d6712dca3891705fda","first_seen":"2026-01-09T01:16:04.626998Z","last_seen":"2026-07-30T02:48:11.717522Z","times_seen":63,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/styles.css","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.436Z","timestamp":1785377008436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FIXgEVLdTtRbk46s6QH4buOi7zO5J%2Fvmx7scrAHblo%2BZHV13%2FhzFb3jyUflSB5xC7owGM2L2jgYF0OY0xUJAmsOtHkqnlTvw8jc12QyigDWDXJ5cxanAyQYRDsYFBxTsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\nlast-modified: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97ebaad49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T04:24:56.442206Z","times_seen":17610560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/styles.css","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.597Z","timestamp":1785377008597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqAeWfNuW5qkNL0FWEJIA3znQY1K5RwKufmrYSVLhcl0jPAi%2BEdeHsF4Drapw30CvL54trbDUMYPiLwCcYMKjlOtkRrdQ1%2BlOJTjchJ1GaZfV61u20zFLkMvzuEFcwVkww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\nlast-modified: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97fcaea49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T04:24:56.442206Z","times_seen":17610560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.962Z","timestamp":1785377008962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 18 May 2026 19:39:12 GMT","end":"Wed, 02 Dec 2026 19:39:12 GMT"},"fingerprint":{"sha1":"43:CA:41:22:01:8A:96:3F:29:27:D4:08:C5:92:11:7C:92:47:81:40","sha256":"96:C4:64:21:BF:0E:2E:04:1E:3C:DB:DB:13:EA:A3:11:5F:80:8B:22:5B:B1:14:5D:A1:E5:BA:DA:18:F3:4E:5F"}}},"request":{"raw":"GET /dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4 HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://nekoocraft.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Thu, 30 Jul 2026 02:03:30 GMT\r\ncontent-type: video/mp4;codecs=avc1\r\ncontent-length: 11511767\r\ncontent-range: bytes 0-11511766/11511767\r\ncf-ray: a230c9882acc76ef-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\netag: \"5264bdd775d3d47263d244ba1d38022c\"\r\nlast-modified: Tue, 17 Feb 2026 14:27:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800\r\naccess-control-expose-headers: Content-Length,Range,ETag,Server-Timing,Content-Range,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=122;start=2026-07-30T02:03:29.951Z;desc=hit,rtt;dur=1,content-info;desc=\"width=854,height=480,abps=184029,fps=30.0,du=62.554,vc=\"h264\",bytes=11511767,format=\"mp4\",crt=1771338445,o=1,ef=(18);\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 9620dee6c67c0c8996f0cdb15001a71a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2080768,"size_decoded":2081686,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2dd54db4e6856eb40181d555440281fb","sha1":"b613289f059a4b23a0616f2220409082cd0bfb30","sha256":"d4e0723003ef4857debdf8faa224e3761ccb3b3ab15ee33250cd4d0c04240bca","sha512":"03f99f13b71a34bf8d0cfb89ff8424f57008029d5245506bc2244296a6d94d4aad15958b21b02d0c5b13002189836d9999e42257c53ec3a1aabc171cf2849276","ssdeep":"24576:hn8rTybvHVmnSzIJ0ZKaFxKwnhX3IQ6cwJKg+0AG9vmNNULAZh68B2Cn5:F8vypmJJ0HFxKmWcw9+ZGhmrUL868MC5","tlshash":"d72533f4474e53dc917396ff690b21d8d4638f499a603f53f8bca2510298bad2de86c8","first_seen":"2026-01-09T10:11:06.451698Z","last_seen":"2026-07-30T02:48:11.71649Z","times_seen":35,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":131,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/logo.png","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:29.728Z","timestamp":1785377009728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZuLvtj5p5R5WbgXQnVTwRUzZYpexzo57nBnMH2WaYIklRKTO8HH5ssucUWRTAKYvBFzznie4kt7RTkLXQ%2BSkmcXNuNai%2BOzISWpWZGT90svllfhzzK6ciJiRNV7Vuxv3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1c88223d3b2954109ba26a463fb518b3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 30 Jul 2026 02:03:29 GMT\r\naccept-ranges: bytes\r\ncf-ray: a230c986cbd549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125633\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125633,"size_decoded":126446,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-07-30T02:48:11.71225Z","times_seen":63,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=forms@0.5.10,typography@0.5.16","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.463Z","timestamp":1785377008463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17?plugins=forms@0.5.10,typography@0.5.16 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fpfdk-1783907304864-0fe3a8b1437e\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1469702\r\nlast-modified: Mon, 27 Jul 2026 23:44:38 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z14MCZQKntqcDI6EZ%2F6WTN9BPgjDtJL548fnfQGskv9HSxxghOsEykYKmYMIZJv1QJ9EjrVihgguDHc30WZVyOwBLOoIIDm6lJpkQ5C%2FkTaqhkfQ%2F%2BiABMVn0hqiEx2uAp%2BikXw%3D\"}]}\r\ncf-ray: a230c97eeb6db4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510091,"size_decoded":146116,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"c423257ce6bde1851c335e8f8f4e9bb2","sha1":"034de0a189bd5e766accc1122ab3a53d53c23cc4","sha256":"0656b912a5893ab56c590ef7e1edd2c9ae57bbff18b30a300cdd66f3f1486708","sha512":"a21bcd7fbf9351dd93a98f4d5d170224d0e7df81cba9da8da1c2cb354257c38d188c1f3c34d929c9783f5cc1389c0e720d268d357efba89a99a3980c48c463d5","ssdeep":"6144:LFQUPEz0+19zXEVy61LLeMP5mqNFPyF2pH7w2nXrPO0s:ZQUPEQSzXEVy61LLn5/CSbHbPO0s","tlshash":"22b43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2025-09-21T16:18:40.255776Z","last_seen":"2026-07-30T02:17:33.499316Z","times_seen":168,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T02:03:27.898Z","timestamp":1785377007898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1TTwqH%2BxbusUO9SA0pujaerEcrM5JEWEUYZGB6vD947rqX1YJkvu1GaxQVjIw%2B7bic%2B29pBM6RDg%2FhdjnxmckdcNaQTL5OsKX%2BXNmkCU8d7AzHsxKvzeg4LEg1X7U1Tqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97b8a8449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"IPinfo","description":"IPinfo is an IP address data provider.","website":"https://ipinfo.io","common_platform_enumeration":"","icon":"IPinfo.svg","categories":["Geolocation"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50401,"size_decoded":11102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (548), with CRLF line terminators","md5":"d224a29cce01a7f6fcee9a7158e315d5","sha1":"b40e574c9dd6cacbef7307f2ffc028a44338d02d","sha256":"327410733e1b119c25750c4bfecb3e4f8671c142cfc76faa71a0f374f904ca26","sha512":"970244b20337ac7e5eaab8b46ad55e84dcccfc9b656007ff017f9f5a6cc7f86d0d53cd2bc468a3d0e87cbd871b82518332f629496375c51ff8db664f8b13a1ad","ssdeep":"768:D4xKohNS4NdjWUjV6YxW2SL9ELVWq48RAE1+zSuxzRgTHU:Ex/hNS4fjiGLkb+AE1+ztuHU","tlshash":"eb33a33532d2152e42b7c6b1b692af59fa6ac307c207d55a72ec07d32ffac848d27614","first_seen":"2026-07-30T02:04:09.056097Z","last_seen":"2026-07-30T02:06:27.158079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/app.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.438Z","timestamp":1785377008438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /script/app.js HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZ8e50JjBI8ZzZTxgDvk1l0QV31FXo9IdVleGr8iqxXYtKQjIjvZ%2BFWBA6KfJcxnTTxztAHhdpIi3NGN6lFCQScApU%2FeMnysjL3MKj8tO059857ntVxewEdjDzjRPCo7KA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5cec70b5e1a447ddbedb409cd763579d\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97ebab149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85504,"size_decoded":28789,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d1a0970815399f5c3b5f69ecdaddbfc8","sha1":"9646a65b52a383485ea88baf133fa7c60b73c184","sha256":"3104e7dd447d44cbe6901a0b6b386099be05c79f062000674578f8b0380b0334","sha512":"d326da9a2f83eedf02574570e88b2709e350e43da41ffc2cd8f574619973255d0ec0f7294356489ad07c4046afa18d0362cda709898f560fad2aa0048569fac3","ssdeep":"1536:wQ9HnMF1F/crtexxE4u13KVeldMDec7wkjddmIlOj8Z:wHFT/U8xx+dxDkLmsZ","tlshash":"bb83704473d0a882a34b5ef73207b4d6d84a08be31a88667d548bca8b5e3737f4f5635","first_seen":"2026-07-30T02:04:09.056927Z","last_seen":"2026-07-30T02:06:27.157256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/launcher-preview.png","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.454Z","timestamp":1785377008454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/launcher-preview.png HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RA7n41XfbX29%2B8ZDpzMXBmELZsV6wRxjZpHP4QUfmzo0%2FMC4MhUsJR4dXXaaOksE3Vjumh%2By2lnBFVoS3LGJi9el9NQuA25wMvQ9wyYOgSfq5usl53jiUEhSKfhqDS6iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"23a49a6fbe7053772c22af0a11a929ad\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\naccept-ranges: bytes\r\ncf-ray: a230c97edab949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 113146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113146,"size_decoded":113951,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2048x1354, components 3","md5":"f029816738d07c396a107b472046543a","sha1":"2dc6bc04d95967b1d3ad76887757b243c406ac4e","sha256":"f5b7cfc87c3fd63dbf59c1176eccf24d9731c0cdb84f10b528a8c4f945598c9f","sha512":"780786f4aceba2a88ec0f7ab775639fed4862c90a5e77e0f36247cda7955b3127ad94c9604612fcda05928092ffe1989230e31867eb3ce8d2ed0cd6de686d729","ssdeep":"3072:IRnexwfcjjjjYswH6PoTwkk/LYPXxkdl/SnkHT:IREwfcjjjjYstPPkmLYCZSG","tlshash":"74b35b078d159783983a9bf4be034ead7f153b0ca9d536ef51278eeb3c602612c4d12a","first_seen":"2026-07-30T02:04:09.057814Z","last_seen":"2026-07-30T02:06:27.159906Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:29.032Z","timestamp":1785377009032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nekoocraft.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:20:07 GMT\r\nexpires: Fri, 23 Jul 2027 02:20:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603802\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7824,"size_decoded":8636,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-07-30T03:46:05.49569Z","times_seen":30220,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.432Z","timestamp":1785377008432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /?plugins=forms,typography HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=forms@0.5.10,typography@0.5.16\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::l57dm-1785376530581-3a48c58840ad\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 477\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxBWihajSOfP1ZNVOHC1t2mZCGR%2F5W%2FUaATeWLrIeQgrhhSr0EDX1G54lc0SalvTwF1bAE%2BC1dguoLEwr1E2MpZvitUVtlp9VnFNzVG6Eba5ZHdVsSZwPo8YvvSiOQL2yrzwm34%3D\"}]}\r\ncf-ray: a230c97ecb62b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T04:24:56.442206Z","times_seen":17610560,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.960Z","timestamp":1785377008960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 18 May 2026 19:39:12 GMT","end":"Wed, 02 Dec 2026 19:39:12 GMT"},"fingerprint":{"sha1":"43:CA:41:22:01:8A:96:3F:29:27:D4:08:C5:92:11:7C:92:47:81:40","sha256":"96:C4:64:21:BF:0E:2E:04:1E:3C:DB:DB:13:EA:A3:11:5F:80:8B:22:5B:B1:14:5D:A1:E5:BA:DA:18:F3:4E:5F"}}},"request":{"raw":"GET /dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4 HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://nekoocraft.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Thu, 30 Jul 2026 02:03:36 GMT\r\ncontent-type: video/mp4;codecs=avc1\r\ncontent-length: 11511767\r\ncontent-range: bytes 0-11511766/11511767\r\ncf-ray: a230c9aec8da76ef-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\netag: \"5264bdd775d3d47263d244ba1d38022c\"\r\nlast-modified: Tue, 17 Feb 2026 14:27:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800\r\naccess-control-expose-headers: Content-Length,Range,ETag,Server-Timing,Content-Range,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=5;start=2026-07-30T02:03:36.122Z;desc=hit,rtt;dur=8,content-info;desc=\"width=854,height=480,abps=184029,fps=30.0,du=62.554,vc=\"h264\",bytes=11511767,format=\"mp4\",crt=1771338445,o=1,ef=(18);\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 9620dee6c67c0c8996f0cdb15001a71a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535295,"size_decoded":536211,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5044fb6539f138fbe272754974094492","sha1":"32c8d3cb615b892f0d63b93273c88ce9df189b4b","sha256":"9c118ff9214a01b3ee33233337bc79eb644aa9a3a43358b1f017191d4b12dda4","sha512":"0a56c4ba89e94ac2c4d9d832d60a60ae90ac48ad72c9af25e3582e80395f170216f4b9db704ead252bfb225da159a80b80ab0341aa5475bdbb59407722b5567e","ssdeep":"12288:h198rTymqvClPd7pIVmnSzfu1J0ZQPja5voCKwnhXcAQMIQ6cwJKJOWZh:hn8rTybvHVmnSzIJ0ZKaFxKwnhX3IQ6y","tlshash":"8eb423d8c74ec3ec93228dfe2d079b89a9720fa761522c72fc6ad305495879d1ee85d0","first_seen":"2026-07-30T02:04:09.059215Z","last_seen":"2026-07-30T02:04:09.059215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6413,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":11,"receive":8,"ssl":6390},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:31.450Z","timestamp":1785377011450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 18 May 2026 19:39:12 GMT","end":"Wed, 02 Dec 2026 19:39:12 GMT"},"fingerprint":{"sha1":"43:CA:41:22:01:8A:96:3F:29:27:D4:08:C5:92:11:7C:92:47:81:40","sha256":"96:C4:64:21:BF:0E:2E:04:1E:3C:DB:DB:13:EA:A3:11:5F:80:8B:22:5B:B1:14:5D:A1:E5:BA:DA:18:F3:4E:5F"}}},"request":{"raw":"GET /dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4 HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://nekoocraft.com/\r\nRange: bytes=1310720-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Thu, 30 Jul 2026 02:03:31 GMT\r\ncontent-type: video/mp4;codecs=avc1\r\ncontent-length: 10201047\r\ncontent-range: bytes 1310720-11511766/11511767\r\ncf-ray: a230c99188e476ef-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\netag: \"5264bdd775d3d47263d244ba1d38022c\"\r\nlast-modified: Tue, 17 Feb 2026 14:27:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800\r\naccess-control-expose-headers: Content-Length,Range,ETag,Server-Timing,Content-Range,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=5;start=2026-07-30T02:03:31.450Z;desc=hit,rtt;dur=1,content-info;desc=\"width=854,height=480,abps=184029,fps=30.0,du=62.554,vc=\"h264\",bytes=11511767,format=\"mp4\",crt=1771338445,o=1,ef=(18);\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 9620dee6c67c0c8996f0cdb15001a71a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10201047,"size_decoded":10201969,"mime_type":"video/mp4","magic":"data","md5":"fee85f7a1b469ea3be0a74611c5dd92a","sha1":"b8c96c0ccd9c6c64076fb8fa390ea2afaada0c2d","sha256":"446db57550f2f3a3bb4fd26670e3d3f7bbed914f712b4099de7a02872964183c","sha512":"86194e44aab2938699390e6bfe6adc51cb001838f594eab80149b0c26eba5317705f371c9600400370f1829b7356405e6976f9d636cab71b91bbac7560f4f102","ssdeep":"24576:fnAwiQSIwEEDnm4UPPnBFOo1KU6QmnP48QP2Zo:PAw58EEb+F1x6NAMZo","tlshash":"5425332cd1ace9d8b2e954f32f98773a45ac2ab4c44c071f7293d43166ba5ec473d829","first_seen":"2026-07-30T02:04:09.060145Z","last_seen":"2026-07-30T02:04:09.060145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":412,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.16.78.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:36.149Z","timestamp":1785377016149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 18 May 2026 19:39:12 GMT","end":"Wed, 02 Dec 2026 19:39:12 GMT"},"fingerprint":{"sha1":"43:CA:41:22:01:8A:96:3F:29:27:D4:08:C5:92:11:7C:92:47:81:40","sha256":"96:C4:64:21:BF:0E:2E:04:1E:3C:DB:DB:13:EA:A3:11:5F:80:8B:22:5B:B1:14:5D:A1:E5:BA:DA:18:F3:4E:5F"}}},"request":{"raw":"GET /dsir9qru9/video/upload/v1771338445/hero-smp_xkmuue.mp4 HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://nekoocraft.com/\r\nRange: bytes=11468800-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Thu, 30 Jul 2026 02:03:36 GMT\r\ncontent-type: video/mp4;codecs=avc1\r\ncontent-length: 42967\r\ncontent-range: bytes 11468800-11511766/11511767\r\ncf-ray: a230c9aee91076ef-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\netag: \"5264bdd775d3d47263d244ba1d38022c\"\r\nlast-modified: Tue, 17 Feb 2026 14:27:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800\r\naccess-control-expose-headers: Content-Length,Range,ETag,Server-Timing,Content-Range,x-content-type-options\r\nserver-timing: cld-cloudflare;dur=5;start=2026-07-30T02:03:36.149Z;desc=hit,rtt;dur=4,content-info;desc=\"width=854,height=480,abps=184029,fps=30.0,du=62.554,vc=\"h264\",bytes=11511767,format=\"mp4\",crt=1771338445,o=1,ef=(18);\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 9620dee6c67c0c8996f0cdb15001a71a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42967,"size_decoded":43887,"mime_type":"video/mp4","magic":"data","md5":"c3523efc36f9c9d4ab0a08266a80965e","sha1":"308369075553763e2b1e875a40e7bde562193440","sha256":"96946d388e22039ebb1d02bdd55bd3f3aed791aec321e0411d2a199215730e25","sha512":"36c7d540789c5136e02e3c8abed27a461fac94d690bd06a426d71f439558f89b9b21ce744c308e93394b3802713bb4665523a49389f0fc1c6d0671319abf3f7c","ssdeep":"768:D/56acn2VFC03r44lnuQROT6C17XYftlit4PZ9jQ5Y:zcaFtUUQAifY","tlshash":"96134a9327226723c2112a7cc4fb13057370da8adbe79797da81d6712dca3891705fda","first_seen":"2026-01-09T01:16:04.626998Z","last_seen":"2026-07-30T02:48:11.717522Z","times_seen":63,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/zzz.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.440Z","timestamp":1785377008440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /script/zzz.js HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjJUONsTgslKwl%2F1Xc1VULAAWRrR8O%2Fp1j0Vri%2F5vWQsca9jtEGxBmD5%2BET6W4vEYJc6nEuFuAEZfP23%2Bd4VtyOF77T8yA0%2FKQbqs8eKQkKORfUepRpiYQXeYTx%2FKSrHyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"e19ad0b38b2e8afd14176e6c21be5f4e\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97ebab249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2929,"size_decoded":2324,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2929), with no line terminators","md5":"c738ef21c3b24f63f96d123a6c012f53","sha1":"d266e8aea1d0434e62b3045b59ea31a1a2c64879","sha256":"c2ff698dd7f01ef05ce57c6d223fc7ac95843912f2ae53396dc11acae0ed844b","sha512":"a402ccd12092e87bf681b69384cf0e0617c09aff68fccbc2c04460c6e4a4ad0d2929dfab14727cbee67d8a01a900af27f3b72092cef52bfb49d91b62b5f8a3d1","ssdeep":"","tlshash":"745133da7980a540736b8fc73f3ba0d6d91ad8173d650a4e85047a9a7cad2a0c0edd71","first_seen":"2026-07-30T02:04:09.061266Z","last_seen":"2026-07-30T02:06:27.153478Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/server.jpg","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.451Z","timestamp":1785377008451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/server.jpg HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4PXdPko9jnTDpqtuIJLT4zvGtspIy6arTVymW9HjHhqjAptuKWt%2Fqp%2BHYSxIJe3QrcG9hkj82FBdkaHLNMcxvtRFCrnj5oi3ztDXbQOLoKTsasFEPBJ%2BMSl68GsdndHQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"94e69b141d1a3472402d2fc412cfbb29\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\naccept-ranges: bytes\r\ncf-ray: a230c97edab849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76615,"size_decoded":77420,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 800x450, components 3","md5":"f305632c1b73d612096e946b0cf5d511","sha1":"b7319c7f513035f060cb9cc12a11db0564afb575","sha256":"06e41d5c5345ec9b6b82fee95984876bd9bdb778d232be004746eb475a94b6e2","sha512":"dde45c10f17564c142e1b7d0d268674865ca0404093b7a91c46acc20f044da2bc0604f2a91864d553bdd7765123be696a4bfdf32a1debb91bef9c0b2ae96b153","ssdeep":"1536:TbJGp1hUTafTJSPBJozNZVNTDZvdbc/hcSrRN3P4zz36grRv/1:8pIsSPBJKr4/BrRNP4P6g9v/1","tlshash":"14730230829f65b05721967c5f47f9e9acae00e2503bfe0c94421a3eb924b84886f727","first_seen":"2026-02-26T23:12:44.922783Z","last_seen":"2026-07-30T02:17:33.506405Z","times_seen":49,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/assets/pixel-clouds.png","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.970Z","timestamp":1785377008970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /assets/pixel-clouds.png HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdzSn50S%2B2ZpWLzqBhGYF%2FWM4z2AVAOOuX00QymPQof6xhE6bK0iN%2FdT30ekEbwtSTDdnblUWA1hM6oLF2sVlLctlssnOCxe7bCc1cMo73GxhcmHWBf0y%2FlJ0dFsbHKdhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=4,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Thu, 30 Jul 2026 02:03:29 GMT\r\nlast-modified: Thu, 30 Jul 2026 02:03:29 GMT\r\ncf-ray: a230c9820b4549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"IPinfo","description":"IPinfo is an IP address data provider.","website":"https://ipinfo.io","common_platform_enumeration":"","icon":"IPinfo.svg","categories":["Geolocation"]}],"data":{"size":50401,"size_decoded":11147,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (548), with CRLF line terminators","md5":"d224a29cce01a7f6fcee9a7158e315d5","sha1":"b40e574c9dd6cacbef7307f2ffc028a44338d02d","sha256":"327410733e1b119c25750c4bfecb3e4f8671c142cfc76faa71a0f374f904ca26","sha512":"970244b20337ac7e5eaab8b46ad55e84dcccfc9b656007ff017f9f5a6cc7f86d0d53cd2bc468a3d0e87cbd871b82518332f629496375c51ff8db664f8b13a1ad","ssdeep":"768:D4xKohNS4NdjWUjV6YxW2SL9ELVWq48RAE1+zSuxzRgTHU:Ex/hNS4fjiGLkb+AE1+ztuHU","tlshash":"eb33a33532d2152e42b7c6b1b692af59fa6ac307c207d55a72ec07d32ffac848d27614","first_seen":"2026-07-30T02:04:09.056097Z","last_seen":"2026-07-30T02:06:27.158079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:29.038Z","timestamp":1785377009038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nekoocraft.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:00:31 GMT\r\nexpires: Wed, 28 Jul 2027 23:00:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97378\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8627,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-30T04:19:10.569751Z","times_seen":289966,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nekoocraft.com/script/disable-devtool.js","fqdn":"nekoocraft.com","domain":"nekoocraft.com","tld":"com"},"ip":{"addr":"104.21.39.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:28.441Z","timestamp":1785377008441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nekoocraft.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 23:14:34 GMT","end":"Fri, 16 Oct 2026 00:14:23 GMT"},"fingerprint":{"sha1":"5F:7B:FB:9E:34:8B:85:E0:37:21:2B:BE:1E:85:90:1D:36:CF:F4:D8","sha256":"CB:D8:EA:A6:24:B8:C6:88:D8:A1:BB:6B:59:5E:EC:69:80:48:4D:DC:F4:38:86:D0:15:E8:07:79:71:1D:26:60"}}},"request":{"raw":"GET /script/disable-devtool.js HTTP/1.1\r\nHost: nekoocraft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nekoocraft.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nEXqeQOPqi6gLyQ1fa0ZaNOTEFRwan%2BGOY0gnPFh8074KzwCkMYrHB3uLMtixnw%2BMEcc60VAc%2B1kmxspgDWE244cNFiurz93VJ%2BOEjWQQdogy64UgVBclr5BYaD3omIwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1a652737ea8f257206ec586f0c1c80f1\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 30 Jul 2026 02:03:28 GMT\r\ncf-ray: a230c97ebab349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14114,"size_decoded":5988,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14094), with no line terminators","md5":"3bd2bd352f1512a937ff89386540794b","sha1":"460cf292d001b29e5814f0e33dca1937576a809a","sha256":"f7fb109b9b9819ca9f9c7dfe90cd05587fbed5494b7da1189c13ce96534e84de","sha512":"0aa9e6e3e6fd17360e05b9e709b9e6cbecb0fac0e8f28eff4f5066a0d70c31cfc6c3e79d1fa23c9eb4ef0ec419dd426e9540c9ca49af50c95f3e3aaf29cfdf41","ssdeep":"192:mT5kNDJeJwFLrlxbQJbjugelGBPfyxXWZbxgb2D+5QisdGMSpmt4mhEyyP:mafeJwFHLbuj9l8MGbz5QtD4mbY","tlshash":"1452b78cb98274701777a6a8243f150ab239695a848c9050b33d4bf82d78d6ec367f7d","first_seen":"2026-07-30T02:04:09.063113Z","last_seen":"2026-07-30T02:06:27.154054Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"nekoocraft.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nekoocraft.com/","date":"2026-07-30T02:03:29.034Z","timestamp":1785377009034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nekoocraft.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:21 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46388\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8000,"size_decoded":8811,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-30T04:19:10.561047Z","times_seen":284860,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}