{"report_id":"3bc00819-1b42-43a2-82d8-18744e25d885","version":0,"status":"done","tags":[],"date":"2026-10-09T16:51:43Z","url":{"schema":"http","addr":"nivoketa.com/","fqdn":"nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"172.67.152.136","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.nivoketa.com/","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"title":"This environment is not supported","dom":{"size":154,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"05abfc3ae3b28704ead71f8a2520ee0b","sha1":"9ac865a9bbaacfbb548de6443f3fe76bdc7df626","sha256":"8b303e97bb13a641addd868a473cd2468e3d86fe2e38ed112f4d5cc6278569a6","sha512":"b52e1b5dc51a73cd8818458046fc801509230d232a572c56c2980c84c391c5e994310095c37dc91d2bdd81261c2908f159c948673064311c0898167d21de4d69","ssdeep":"","tlshash":"f5c08c4e6463a548ea0351a026c33590c88d82aba49ac1218882449370ca2aac0ca3a5","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"2026-05-29T00:41:25.05103Z","last_seen":"2026-10-11T04:01:20.523522Z","times_seen":332,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nivoketa.com/","fqdn":"nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"172.67.152.136","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:51:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"umami3.devliang.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.nivoketa.com","ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-05","domain_rank":0,"first_seen":"2026-10-09T16:28:55.483036Z","last_seen":"2026-10-09T16:28:55.483036Z","alert_count":0,"request_count":17,"received_data":134599491,"sent_data":7920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"umami3.devliang.xyz","ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-27","domain_rank":0,"first_seen":"2026-10-09T16:28:55.477919Z","last_seen":"2026-10-09T16:28:55.477919Z","alert_count":5,"request_count":5,"received_data":11145,"sent_data":3076,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nivoketa.com","ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-05","domain_rank":0,"first_seen":"2026-10-09T16:28:55.478896Z","last_seen":"2026-10-09T16:28:55.478896Z","alert_count":0,"request_count":1,"received_data":571,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"filepk.oss-ap-southeast-3.aliyuncs.com","ip":{"addr":"47.254.218.28","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Malaysia","country_code":"MY"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-10-03T16:43:53.731745Z","last_seen":"2026-10-03T16:43:53.731745Z","alert_count":0,"request_count":1,"received_data":7418,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:srcdoc#138","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08721193bcfc7670bc80aeb0c762637","sha1":"e3626324bad256da2b93359b9b5384b950a4b8a2","sha256":"ad13f9173569134c3325b6c4d78860a86518d92eb07b6539330700e042aea81a","sha512":"f9230a55a8666f5cf13cf3b299994fe1e1fce3e56a825ea948d6cb768286f31918669832c8d349f6470c672052e04d168622e0dd75495fcfb43e68df36fe3ebc","ssdeep":"96:ofPi7plIL+60mkyDVvygyFh20gK2NPkiTiIRA8xq8TR1Cb3PFCENy3hja74NLqKL:oeSLSm22hn4b/FCEk3hjaopS1+p","tlshash":"48b1b63023846f75e14497e739057da57fb0493aba7a79e1fb1efa600190f2481b1e61","size":5283,"data":"","first_seen":"2026-10-09T16:29:04.37549Z","last_seen":"2026-10-09T16:51:54.376738Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#141","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b4986cdfac508110a7ce2a60b47bd7f","sha1":"e58dcc9ded522ff47404213056d5257b1303d67a","sha256":"094cffee342c72cba298fc1632558ee9c2be6c72ab58530babead4384a29768a","sha512":"adcbbba4415feafdcd80f3bfe9168f075c92e453ca90c699c40007283b1e32a6c488156a6e61f20485c7d7786abc47c4b4feb63bd7bfd81be50f8cab02f93e25","ssdeep":"192:c1rMNDFQOepefFdjSV1ruHUr+Uxr7yqR6DsnulMNLqWargD8fGz+dJhBqfRZNZ:c1QtFkpWF4V1ru0r+UFyGuZrgD8EcBqf","tlshash":"32f1646c70f4067694fa06bfb1e1ad98b8394219f046fcd0d78e4a8d29e3d81a339949","size":7511,"data":"","first_seen":"2026-10-09T16:29:04.378928Z","last_seen":"2026-10-09T16:51:54.377835Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/script-2.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ea2a1da36633cb6fe8efc335d1885b7","sha1":"290e6e49ad412f5c38917ca2ae122678869c5a9d","sha256":"b4a6d7299056bb555254ecf64e29cac281828f3764bf9b6babf2ca23f3d87773","sha512":"18427efe02165e154538ca4c19631134960d34eac448bda20e975ab2745c1c8fbcdd664c39c14873aedf74b8cf345b3d6cb5266a515ccf0d9490b285f4562864","ssdeep":"12288:SKC8C026aJe6i3C026O0eOJMLvlx7vO42Y3f:BCfdL5iydv4fJw","tlshash":"4ce48df73a4432b470139dd3b3c37abbf4ab79a1a9522af6f58c9750c9c16f10a12941","size":670622,"data":"","first_seen":"2026-10-09T16:29:04.323827Z","last_seen":"2026-10-09T16:51:54.353733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filepk.oss-ap-southeast-3.aliyuncs.com/website/js/index.js","fqdn":"filepk.oss-ap-southeast-3.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.218.28","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Malaysia","country_code":"MY"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e9ee06da15a29ddf640dfba4c6cd7f6","sha1":"657ec17b87122cb4f9821874c4bef6319a20a3f1","sha256":"26b85ee91f6c0ee24467fcd31734e3a1fd2838f230fadaf933dcb6dbbad15410","sha512":"1a86abc77847645630e5cddfd76ff5060bf7a204596a1faf3bab4c24374127307c8f2a152291a9ba68e238121f432b7e8d5089a7ac93f820351dfd7bfcd5646b","ssdeep":"192:LNWLR6Q0JgrNTZ0sFNGp9tUU3m3jytWRUX:cUJsFYp993m5m","tlshash":"bfe1627918e350a12b6770bacb3f6508397465037889ed463ecc8720af9493953b5ff8","size":6868,"data":"","first_seen":"2026-10-09T16:29:04.297516Z","last_seen":"2026-10-09T16:51:54.351172Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#137","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a8f2c8971e00665c5164d470439b02","sha1":"89070eac2e7e14af2d201ae0a1806b113e400ecf","sha256":"9764a58d4d2c64e68e1c80f588f56c4e70dac98083cbb88cbca92b63b68af0bd","sha512":"9eef309d3f7e6eef260324b550e16d7e32824af28c0d17e50ca38b9536b5326b0d8f5cb98a5d9c1a1513469b44bbba96d40aa9bb4ed15982904a89a884a1eeb4","ssdeep":"","tlshash":"ada002553513717e37919a4447bf5ad4352b08190161e5485550552529350535504650","size":79,"data":"","first_seen":"2026-10-09T16:29:04.370648Z","last_seen":"2026-10-09T16:51:54.379717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#140","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f29c75f275a8a5c946fe4bd66b7ac388","sha1":"c5cbb6e842c8da96a93d84e2666c14d914e889e8","sha256":"134514a2990119fa973a3ef45d37d2eed2126b3ba71eaf25be2d22a0764f5c63","sha512":"a45bd0ac3960720f6df3959b0d6649bc495283b06239981911853eb4b2beb9c4ed441f85dee903446a805018a4a9f55f74f07ae298c5d4192ab6490d347167b4","ssdeep":"","tlshash":"78617521e12d5d3c409b52f792e0a7cbf2735a1af40a71a1a438971c2cc9e5f45af9d3","size":3268,"data":"","first_seen":"2026-10-09T16:29:04.360849Z","last_seen":"2026-10-09T16:51:54.380805Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T05:40:53.072982Z","times_seen":451216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/script-3.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba2a64ea53cd59d4bda9a9f5fb2644e","sha1":"0663ffbfeddacd909bbc04a5dd504ba195c4f350","sha256":"3dc9e214c77f21b07db24752a747ad0fe71249ed81cadc0fbaac36b44f299523","sha512":"f821933c17c88827e60041c78bd5852a14e2d29074415a72bd8b5030f854d14bdaa42e288db0838e46a50aed9852b317453e2892e4efb26fba859afa0a8cde7a","ssdeep":"12288:nu8EZ7v+vZSPvPfQAaLVcaPfC1Qg8RCvP/kB2Nz7jTdOZ:nu8Etv+vZSPvPfQAdnCA8UNz7fdc","tlshash":"e3c45dd132e3607187c619e528610902f238f956705d44ecf66cdee62fabd8994bbf38","size":566072,"data":"","first_seen":"2026-10-09T16:29:04.209013Z","last_seen":"2026-10-09T16:51:54.350109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umami3.devliang.xyz/script.js","fqdn":"umami3.devliang.xyz","domain":"devliang.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7edb400174f8178e695beb2ad82c40b4","sha1":"e6fa19982ad7deb34f76d0bf357b9a8cea6f04f3","sha256":"654f12c7548be726eba5b71d5ef8bffc2a41a39a0053e2a49a847869ccd7ac3f","sha512":"5bb58204f25f2d2662e22e0439b2ff559d927e0005c2b6c5d36dae8ff3134023c1c169f442fb7375c2af01b1f7eecd0e9a28a714da9ffd52ca6bfb51677b4933","ssdeep":"96:58idZO4zv/B4EcsHxdBD7Ian4V/Ax8QfqbyCKMp3ZbPane8+w3fiVC:58GZ9B4L4dBD7nnOAx5iVKYce8+w3fiI","tlshash":"1aa10ae1e152b0b6277958d590742211f23627b1b842c494f9bd1c875e2928b55bef3c","size":4773,"data":"","first_seen":"2026-09-17T08:32:14.547252Z","last_seen":"2026-10-11T03:25:54.475016Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.nivoketa.com/style-2.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.855Z","timestamp":1791564597855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-2.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4dfE04788g4m%2FC7Oz2SzMPoKlid6k2%2FaIlVEMZJNv76MhQGXi8iCNkfpyXoIPbfyGvWNdI2XRygBYmVNIC0WX2VMZQgeIbIfadG4MbHZTvRMB9LUdda2MuNgmMYczmgeYOo\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-48bd\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b09df175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18621,"size_decoded":6820,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4073)","md5":"ba33ed6e9101f446f5d2fe88382b0aa9","sha1":"ca0b81dfeeabee19d8a7e313fd1905e93f362fec","sha256":"30266cd66c0812b4262a8d66ca1a943cc0437130ff4b8f3539ac47775228aefb","sha512":"a0ecd84637a22b2e75aeea17b760b5c2f2f88842be8c884b30a23e6edb02d4654d6b2829727c47cf4f1da2398b9058c531144b080f255381fd6119e8bce94380","ssdeep":"384:Y8wHF0smJBQbqIR09p6Tc5Mw5OtwV4CKGHo:jtQbX0TfBiCK3","tlshash":"04823023e2482169b0bfd8daf490bbcf71149657e1230bfde996b479c4d24b32a22745","first_seen":"2026-10-09T16:29:04.285836Z","last_seen":"2026-10-09T16:51:54.339507Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-6.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.862Z","timestamp":1791564597862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-6.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoOEpB9U%2BIQg6DnkDSwgsiLa9P6O7hqpC%2BxsA15PNFiR8dKRReqIH2%2B3rMlzewKTXMjpcFiFmaVtwQSKcBTPrmKtETmyPSslTkCBR9MjsvLS2wRWGbqnmi8EN9dLa62cG3tW\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-640\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b09df675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1600,"size_decoded":1460,"mime_type":"text/css","magic":"ASCII text, with very long lines (1439), with CRLF, LF line terminators","md5":"3a79dd49c17968f97b396fea3ddab8f6","sha1":"ca989775724aa058a77cc87eba891cd657bc6fb6","sha256":"4d825079742febcb3e94aa91851b7cfa2dbd8879226e9cf69f911c233b833217","sha512":"f449f8d1396db359944dd5fdf41742767f3809425404f4e30087f789fcbbb0bb44d1b1f2063a1812543c89f73b29661a6f835bbe0f4c49843d3a5e94c753fa1b","ssdeep":"","tlshash":"593114137325222870b14457dcc4a7bdb118d90fd36f5bee8d63762a88c92fa232375a","first_seen":"2026-10-09T16:29:04.350499Z","last_seen":"2026-10-09T16:51:54.340968Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/img/image-5.svg","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:58.187Z","timestamp":1791564598187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /img/image-5.svg HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:58 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJPWMLTusDdkv2v7Yswxijc%2F0dWt1K2S4%2Bun7cUZoUOaUzxt5U7p7yqIDMhpTgPymswqP%2BeMUP%2BHXbu1SNXy7FLT4Gt1clpW3I6eAwF6yjCl99UIXcWHBTotFKOLgnKyKHhG\"}]}\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"12cce400-53c\"\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47ee1b2ae4775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":1313,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ce090f7fdf322e9d03bf0317d216402","sha1":"42aff49a416dd0fc7a53dc1a778226b2fee31b2f","sha256":"0f9122e22d9e8da1a10450d3d1c71bc4f958f9b96bd136b315a6158c9763b8ce","sha512":"783f884c90e765e43a9016e85f9fae5b2d5a25aebc48ebed536a9c55b34329953c6036650f88c900a996924f274586b9041d36575d33802356a3354d99bc19c3","ssdeep":"","tlshash":"40212325d21c581bfa00c61df71b7161321e50d68e89ef1cb6405b2f61d49eb257d3ec","first_seen":"2026-10-09T16:29:04.241996Z","last_seen":"2026-10-09T16:51:54.342314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umami3.devliang.xyz/api/send","fqdn":"umami3.devliang.xyz","domain":"devliang.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:02.473Z","timestamp":1791564602473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devliang.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 15:44:00 GMT","end":"Wed, 23 Dec 2026 16:42:35 GMT"},"fingerprint":{"sha1":"84:CF:95:E5:76:5E:25:B9:B5:9E:8A:59:A5:30:84:0E:26:F7:FF:A6","sha256":"38:03:FE:AC:23:A7:36:92:B5:26:57:56:94:46:29:E8:9A:F3:CA:9A:29:E7:01:CB:8A:1F:51:75:B6:22:23:FE"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: umami3.devliang.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-umami-hostname,x-umami-website-id\r\nReferer: https://www.nivoketa.com/\r\nOrigin: https://www.nivoketa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOsiQie4ZuDF9dCQ0KHwDHBS7JwmI7jlV3Z1tdASWL08HFUFI88zmKcQpvCfgZx%2B4LoOGrqzUfRxBBj0ChZ7xirK7lyl6VSY85jmO1ob8BsqjQOxac%2Bl146RcZ%2Fek5%2BIdOJYktJj\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1cd880d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1088,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T05:43:33.194904Z","times_seen":19018648,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"umami3.devliang.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/assets/js/group.html","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:12.880Z","timestamp":1791564612880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /assets/js/group.html HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:13 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrnsSmr8wVRB0SQruUrb10WOSMIvaM4tKM2%2F4spwUEVx5b%2BzUTiKegJTt5Zm1PqwoF3A%2FnpiSylY0jiucrsD6OrElkGbcdyqM%2BezbBp%2BWPSD8OIEE4NBUkQPpipX2NbhE8hs\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47ee20e792075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":796,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a13cff29e34dd0decb4e7468d08f5f22","sha1":"65c6f6e54f390645dd4fd8fb8288449a463a1631","sha256":"7b61a0032297d2b400d3dd5e69556a8ca31adb717464c247aaf997f4b4de26f6","sha512":"b50b5c040cb0f9449a45b7235157954166550a0029c0f479cf4ce8091e2b4af718f3ef797fb9e3d5849176b86492ceecd7244c36ec41cb99626a5a3d2a8361bf","ssdeep":"","tlshash":"dcc08c6e2513bc4cc663217422c364a0c08e93a7a5aa82228480805331cb29a8ac7396","first_seen":"2026-05-04T00:40:16.081578Z","last_seen":"2026-10-11T05:56:03.492062Z","times_seen":4730,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivoketa.com/","fqdn":"nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:49:57.175Z","timestamp":1791564597175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\nlocation: https://www.nivoketa.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=802BvKtyKiFaXOJ%2BGars1PkaBO8ssd2Qx%2BdI7rztOzhMb6iDBJmUsm%2FE7Nja6s8iV%2BT4ynsvQDtkLnJd9om54ePsANyG03aFhDTdZcKgFdJggpjY23eNYBAWSZfhRnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=0,i\r\ncf-ray: a47ee1ac8d2975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T05:43:33.194904Z","times_seen":19018648,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":6,"connect":21,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-4.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.859Z","timestamp":1791564597859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-4.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qoDARJkaGsgi%2F%2Bf%2BGCu4M5mHEBcLuzPjaY9VUnDdpPbAuK7RGTmfHmFdexCcIKJ1lW6Qe7Fb3E3bAUhUzCM3G3mfYaoyNijk6T%2F7EsG8mHb4CfQepbPc3K8rLGhNlfdCU%2Ff\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-a77\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b09df375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2679,"size_decoded":1811,"mime_type":"text/css","magic":"ASCII text, with very long lines (2678)","md5":"d497d2d97a83bd902e57cc8e38af3f62","sha1":"587682b57afa8966cab05401cfdee4aac50af061","sha256":"d191fc68540e521c86e6d02b47af12bf4fcb2fe87270a40d2b47b3b7a246d929","sha512":"63d2de3a1bfe7cd2d620267cc187997b29c82be182e4c2b25dc455752d749674c6f0d69f479c94f88cd363f406155b60c8d0d18140352ae2b1fcc349810125df","ssdeep":"","tlshash":"11514273e588da29b07fd998acc063caf1109013d13207e9e9d2f7a4c88e5b216673c6","first_seen":"2026-10-09T16:29:04.28933Z","last_seen":"2026-10-09T16:51:54.345678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-7.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.864Z","timestamp":1791564597864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-7.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLPH976XuN1%2FuDZi2pdkBhfyFFZCkrzw7z14EWBy6F36YjO%2BXAImkyphu7n12PzmY6lfpyH5OS6tZkMxrkKjSCwgGj87r0ysKMLKZwYuKLJlwrjKgEF8b%2FH0ADBUfzbu2CcN\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-b00\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b0adf775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2816,"size_decoded":1729,"mime_type":"text/css","magic":"ASCII text, with very long lines (1233), with CRLF, LF line terminators","md5":"f989505fa6e89d9ce76f12e56ba22535","sha1":"761c74e9adcbef947cc988c2bad23224da71fda8","sha256":"6f29d4f1cc9b309b9ff083cd7ad2755cdfa95d03fa5bc420eca41b1f293b9223","sha512":"71bbb442e23a4d282471d3cc5f3b848f19cfdd5b939410318386b09bbd10658d238aeca9d52c37270c627f3516c0255971fb7886edf96ce87a41fdf33d6a5ea6","ssdeep":"","tlshash":"4f51245af630632cf6ee4296e798ada9f004642fc7b621f7dc51d1a9cac40e605361c7","first_seen":"2026-10-09T16:29:04.248739Z","last_seen":"2026-10-09T16:51:54.347489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-8.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.866Z","timestamp":1791564597866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-8.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OoWixb%2BncsMOIHgSG2IUc0fbIK0MZTHJ%2Bwo3owvm0EjEaaD6ytI4gzax5E9zECiknkOgIyux2xamtGMWooMkYBhnssN9My38eM9HrrT3lod4ehV8r7xEP6Noo4mbRjU%2FerqF\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-1213\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b0adf875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4627,"size_decoded":2386,"mime_type":"text/css","magic":"ASCII text, with very long lines (1485), with CRLF, LF line terminators","md5":"47651e5fbc9d6d7678ac07589796e108","sha1":"0aefe2f2339f46844a40f54e0d58ca7214bc5aa2","sha256":"ee1d717fd94554567ba3d2faa05b9dbdd1c9de255002c5e64d03607f5396dda2","sha512":"b3d5c1351f007ae2ed8c9024a6ee8582bfc6e48d30e712c3bca28d76648eeb1bf276f7f5cf7e7cee3c21e80fdc27f847a22998792e3121fb041051ab6d64a0dc","ssdeep":"48:E4XfgbMHA9H6gDEvS0pUIt9B/tNhbgCV4UJb5mqyhYfCuT1rUOHQi0Z:tP+MuHkiIDB/tnbgW4Q5mDhcCk1rfQJZ","tlshash":"a2a14213eb20932ef2ee0487fb849ea4f152b53be5b261f7ed00d518c6c4099153b68b","first_seen":"2026-10-09T16:29:04.254788Z","last_seen":"2026-10-09T16:51:54.348999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/script-3.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.871Z","timestamp":1791564597871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /script-3.js HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6wziWNXS1GLGKo6K4zN2%2FW9RvZAsISacxudCPv9A%2BbyaHY%2B8RNeCw23W0gXQZ3Y1KIn%2FzaK1ataDCBSwbuq2%2FRp1bTYadLPYtvW10u8cM9Uv8T0%2B5f8AnjiZzv0mkIr9GrV\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-8a338\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b0adfb75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566072,"size_decoded":204509,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ba2a64ea53cd59d4bda9a9f5fb2644e","sha1":"0663ffbfeddacd909bbc04a5dd504ba195c4f350","sha256":"3dc9e214c77f21b07db24752a747ad0fe71249ed81cadc0fbaac36b44f299523","sha512":"f821933c17c88827e60041c78bd5852a14e2d29074415a72bd8b5030f854d14bdaa42e288db0838e46a50aed9852b317453e2892e4efb26fba859afa0a8cde7a","ssdeep":"12288:nu8EZ7v+vZSPvPfQAaLVcaPfC1Qg8RCvP/kB2Nz7jTdOZ:nu8Etv+vZSPvPfQAdnCA8UNz7fdc","tlshash":"e3c45dd132e3607187c619e528610902f238f956705d44ecf66cdee62fabd8994bbf38","first_seen":"2026-10-09T16:29:04.209013Z","last_seen":"2026-10-09T16:51:54.350109Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filepk.oss-ap-southeast-3.aliyuncs.com/website/js/index.js","fqdn":"filepk.oss-ap-southeast-3.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.218.28","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Malaysia","country_code":"MY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:58.179Z","timestamp":1791564598179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-3.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:22 GMT","end":"Sat, 02 Jan 2027 02:51:13 GMT"},"fingerprint":{"sha1":"74:31:9C:D2:75:E8:FA:D7:F7:C4:5D:D8:1D:E4:C6:1E:70:F1:BE:2A","sha256":"24:2E:4D:47:FF:1C:EB:84:A6:C9:AD:91:6D:BE:A1:25:7F:F0:23:AA:B1:8D:90:AF:A3:79:C2:C8:62:FC:E2:3E"}}},"request":{"raw":"GET /website/js/index.js HTTP/1.1\r\nHost: filepk.oss-ap-southeast-3.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 16:49:59 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 6AC91B3736350F31386BBBDE\r\nLast-Modified: Mon, 05 Oct 2026 15:30:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9747167763790684619\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: np7gbaFaKd32QN+6TGzX9g==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6868,"size_decoded":3013,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9e9ee06da15a29ddf640dfba4c6cd7f6","sha1":"657ec17b87122cb4f9821874c4bef6319a20a3f1","sha256":"26b85ee91f6c0ee24467fcd31734e3a1fd2838f230fadaf933dcb6dbbad15410","sha512":"1a86abc77847645630e5cddfd76ff5060bf7a204596a1faf3bab4c24374127307c8f2a152291a9ba68e238121f432b7e8d5089a7ac93f820351dfd7bfcd5646b","ssdeep":"192:LNWLR6Q0JgrNTZ0sFNGp9tUU3m3jytWRUX:cUJsFYp993m5m","tlshash":"bfe1627918e350a12b6770bacb3f6508397465037889ed463ecc8720af9493953b5ff8","first_seen":"2026-10-09T16:29:04.297516Z","last_seen":"2026-10-09T16:51:54.351172Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":57,"connect":190,"send":0,"wait":195,"receive":0,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/favicon.ico","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:03.082Z","timestamp":1791564603082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:03 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvkpaJt%2F5rQCDjymvJMN3NKHem%2BOI6YPH%2BJztsRVNacKQpZ2%2BuJbcJGH8lQNjkQx3KTXWyVYpwbfZ5qyFo58MjSKXwu1B3QidoJyLcLFWw09ih8nIrqH1GA3aQ1GS4EJk9JD\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1676\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47ee1d13cdf75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":756,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a13cff29e34dd0decb4e7468d08f5f22","sha1":"65c6f6e54f390645dd4fd8fb8288449a463a1631","sha256":"7b61a0032297d2b400d3dd5e69556a8ca31adb717464c247aaf997f4b4de26f6","sha512":"b50b5c040cb0f9449a45b7235157954166550a0029c0f479cf4ce8091e2b4af718f3ef797fb9e3d5849176b86492ceecd7244c36ec41cb99626a5a3d2a8361bf","ssdeep":"","tlshash":"dcc08c6e2513bc4cc663217422c364a0c08e93a7a5aa82228480805331cb29a8ac7396","first_seen":"2026-05-04T00:40:16.081578Z","last_seen":"2026-10-11T05:56:03.492062Z","times_seen":4730,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umami3.devliang.xyz/api/send","fqdn":"umami3.devliang.xyz","domain":"devliang.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:12.623Z","timestamp":1791564612623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devliang.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 15:44:00 GMT","end":"Wed, 23 Dec 2026 16:42:35 GMT"},"fingerprint":{"sha1":"84:CF:95:E5:76:5E:25:B9:B5:9E:8A:59:A5:30:84:0E:26:F7:FF:A6","sha256":"38:03:FE:AC:23:A7:36:92:B5:26:57:56:94:46:29:E8:9A:F3:CA:9A:29:E7:01:CB:8A:1F:51:75:B6:22:23:FE"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: umami3.devliang.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-umami-cache,x-umami-hostname,x-umami-website-id\r\nReferer: https://www.nivoketa.com/\r\nOrigin: https://www.nivoketa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HptlEYL2c76yn4Ey2zj83G2uEBa6xu6Fd66Mm3XhcR6KOoRd33a16yl8mg68eBcDlvu8foY36%2Fz%2FXegcIQdJvBGJEHIbk88TJ5E5kBcJhCnihLYg9r130YgjJ7JowcELX3mleAsc\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee20cdcaa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1084,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T05:43:33.194904Z","times_seen":19018648,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"umami3.devliang.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:49:57.234Z","timestamp":1791564597234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZRYjDXcJPrFAwWKodoumx%2FMKd5qXLShl1wZMZwfH3CVczeQXI0i51zRiMA7R9Kvik0JWiNOs3Cf1g9Ib42pk8bkpDiLaIbDussBVZrOCUDZuCdJbRp%2FcD7ARHfOsPffOhRO\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Oct 2026 16:49:56 GMT\r\ncache-control: no-cache, no-cache, no-store, must-revalidate\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47ee1acbd3075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21342,"size_decoded":9628,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9055)","md5":"c705ea16c48e412b353e1b7197c9f0b0","sha1":"66d54937baad7c2a9a229553b96c69c2628ab16a","sha256":"3f4405d063fe5afe76788cdd3eca6abe2ce6ffb08e9306709fa19dcf39cc12fe","sha512":"707fb59de529f5e67ee629b5f701a55d1b425ec8bf9a3f072af47d474a3485b8c8ef0adc90e264a19e3e52c5f60479ca944318539a1e92ecb552528d928089b2","ssdeep":"384:KTpIIIIIIIIIIIV2HPFPL8y1nptD+7+EkB5xaqLNLMMRb8lpWDj:0IIIIIIIIIIIoPFP/1pttzLjNoMRvj","tlshash":"f092b5b6909668b652374ec574b6a34e20ebc20de8722810f7bc5bd84fded95bd0e407","first_seen":"2026-10-09T16:51:54.352291Z","last_seen":"2026-10-09T16:51:54.352291Z","times_seen":1,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/script-2.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.850Z","timestamp":1791564597850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /script-2.js HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1esYSs6QTx3nSTHYX8IdXKqrLVTpSxUGZUIKJb5kTAwPbSHwwsvF0NPHgNiiJGGUR4ghBYCB1NOdstl5TJm1UkelN2FBK7%2BId1aAt77rA3HGH7LpuVER%2BX8KAL6MTAnSEeDS\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-a3b9e\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b08def75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":670622,"size_decoded":267970,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62680), with no line terminators","md5":"9ea2a1da36633cb6fe8efc335d1885b7","sha1":"290e6e49ad412f5c38917ca2ae122678869c5a9d","sha256":"b4a6d7299056bb555254ecf64e29cac281828f3764bf9b6babf2ca23f3d87773","sha512":"18427efe02165e154538ca4c19631134960d34eac448bda20e975ab2745c1c8fbcdd664c39c14873aedf74b8cf345b3d6cb5266a515ccf0d9490b285f4562864","ssdeep":"12288:SKC8C026aJe6i3C026O0eOJMLvlx7vO42Y3f:BCfdL5iydv4fJw","tlshash":"4ce48df73a4432b470139dd3b3c37abbf4ab79a1a9522af6f58c9750c9c16f10a12941","first_seen":"2026-10-09T16:29:04.323827Z","last_seen":"2026-10-09T16:51:54.353733Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-1.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.854Z","timestamp":1791564597854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-1.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPH0K3099ynLA76Bydp1oNBQrDzJnge1esSFfxAQPNL9AbPGiPYDm19NTV9GNMge%2FiR9VcX88072ejMHv%2B9alOY6e6o25YgIQU5dRb%2Bt350aFnKU9I3c1k3scGRUdOU6Hmtl\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-2c4f\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b09df075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11343,"size_decoded":4424,"mime_type":"text/css","magic":"ASCII text, with very long lines (7481), with CRLF, LF line terminators","md5":"279ff22ae458d80ee448624feceae28c","sha1":"350a2f4ac054feb61e5d851b48f8a389fd30ff47","sha256":"cf7c70983febc36ebdf2c063a29da1e5b6603d16dd0d4857c5e5f43b580f7a39","sha512":"65dfd964fef6179b2573e0136086cf444fbef0b24d54d9cdd4c7351c69461835b82e5dfb3c45ebe835531042b741e5ac6f152d0ca1401bae4759e950d1fa2ffe","ssdeep":"192:A2WWtlngj0D/OLz4lwCVFWtirXJ/h4F3/:NVrnE0DOP6+tirL45","tlshash":"6b322373b2646138f87bda86e6d467deb010aa67a43347e8ecc1d124c8c75f32b26745","first_seen":"2026-10-09T16:29:04.327848Z","last_seen":"2026-10-09T16:51:54.355762Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-3.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.857Z","timestamp":1791564597857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-3.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XD8eC2YwnNkGkxxWqlGKWQ36WG0Etz5Lu3gMzHxmRj6dpVglT9Swy2V2e1kOOKy5E4Y9SOZdaNbltRBG2kmaI0ZbXY%2BaF0%2FP4y1p5KiWRbmfk6mWupv63%2F4zGT%2FF7vA6mOMJ\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-1177\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b09df275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4471,"size_decoded":2255,"mime_type":"text/css","magic":"ASCII text, with very long lines (4470)","md5":"0cbfe76c598a062f9349c6cfe6866c3f","sha1":"d604cda6f14ba5d86b97c11fe614249c5d19f181","sha256":"f3d29171b4a270208bedc396be03580796528dccd8066511071e52cf098ff724","sha512":"f00893ea0c8b668616ad4f0fba7d7e0be3a88d43c3b3256c243e4cff280feaa8086534b0b644112a473404ace484d22c15e618a13286f2d06757e7e16057d7fb","ssdeep":"48:lF3ODYpDNuSOeObc/LIdm0beRBMevu1MMkEYcUJELM8JU3hozQrOEMWm7v6Wd5WX:lA8tIdSRBrm1MKYcnLM8tQrvxWd5WwWl","tlshash":"c2910f93e544212c347f99c8f49097dbb1214b26c0274aedecc4b96dc58e17b2739b8a","first_seen":"2026-10-09T16:29:04.338256Z","last_seen":"2026-10-09T16:51:54.357478Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/style-5.css","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.860Z","timestamp":1791564597860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /style-5.css HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4aHVNHxX9fW5o%2BljrH9fsGsRFtjn0%2FlRgFN7z1IFdBOxgHnIyIvOLXJQHf3owHCrKQfdBD2l8Ulqi43%2BBIlZ3Rq2GIFyZTneybuJsHqJysGHhEI56Raf6QWhCncVz1VkCXY\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-6a6\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b09df575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1702,"size_decoded":1489,"mime_type":"text/css","magic":"ASCII text, with very long lines (1419)","md5":"ff2bfebb64e180db61da166334c93e32","sha1":"5b43e2616ade32a4a60eed87a664e23fa0a3ae1b","sha256":"5219325c591bed2b78faf08cc352781473738c09e4d279eac6f7ecca3a263988","sha512":"ac8ef404f98fd36804a830ab576163b6f5bebd140eb43129760f52b40c469e510ddb5afbf5345805e623535323886c592f84bdd51087ecf985bab766bbb3731f","ssdeep":"","tlshash":"c731cf52b1846035b07f85aaa89c7eeeb530511b84366bebfc4171bdc4e75f22b22346","first_seen":"2026-10-09T16:29:04.345446Z","last_seen":"2026-10-09T16:51:54.358464Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.869Z","timestamp":1791564597869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 11 Oct 2026 16:49:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHQn5SIoBuq64TPxoKvz%2Fiindmz0T%2FIL18gtY%2FNxffDmfm7bhSd4SzsaxfynD%2BECqsou6NT7PAkojN7c%2BBHZ1mC57YyRPFmi%2FyClvRcqoT35zUqAuo%2FQyI1aw2I6YzXb%2BQ%2FY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\nserver: cloudflare\r\ncf-ray: a47ee1b0adf975ab-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T05:40:53.072982Z","times_seen":451216,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umami3.devliang.xyz/script.js","fqdn":"umami3.devliang.xyz","domain":"devliang.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:58.177Z","timestamp":1791564598177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devliang.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 15:44:00 GMT","end":"Wed, 23 Dec 2026 16:42:35 GMT"},"fingerprint":{"sha1":"84:CF:95:E5:76:5E:25:B9:B5:9E:8A:59:A5:30:84:0E:26:F7:FF:A6","sha256":"38:03:FE:AC:23:A7:36:92:B5:26:57:56:94:46:29:E8:9A:F3:CA:9A:29:E7:01:CB:8A:1F:51:75:B6:22:23:FE"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: umami3.devliang.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:49:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Thu, 17 Sep 2026 04:22:47 GMT\r\netag: W/\"12a5-1a0ad9a51d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 74196\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1QL2UpjuwFIRAvz6c9jtwXpjuo%2B457LnHveaDlMkIfFrjB5eaH2Ume%2BV1m0%2BrRSf2GRDvGH9Vzrmf2lW2qMDcAHSOXKkeMCFUNVEQKfhN4YjJfG8CUBvBF6xByYna9EOjZSeJB4\"}]}\r\ncf-ray: a47ee1b30b6b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4773,"size_decoded":3383,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4772)","md5":"7edb400174f8178e695beb2ad82c40b4","sha1":"e6fa19982ad7deb34f76d0bf357b9a8cea6f04f3","sha256":"654f12c7548be726eba5b71d5ef8bffc2a41a39a0053e2a49a847869ccd7ac3f","sha512":"5bb58204f25f2d2662e22e0439b2ff559d927e0005c2b6c5d36dae8ff3134023c1c169f442fb7375c2af01b1f7eecd0e9a28a714da9ffd52ca6bfb51677b4933","ssdeep":"96:58idZO4zv/B4EcsHxdBD7Ian4V/Ax8QfqbyCKMp3ZbPane8+w3fiVC:58GZ9B4L4dBD7nnOAx5iVKYce8+w3fiI","tlshash":"1aa10ae1e152b0b6277958d590742211f23627b1b842c494f9bd1c875e2928b55bef3c","first_seen":"2026-09-17T08:32:14.547252Z","last_seen":"2026-10-11T03:25:54.475016Z","times_seen":107,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":56,"connect":1,"send":0,"wait":25,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"umami3.devliang.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"umami3.devliang.xyz/api/send","fqdn":"umami3.devliang.xyz","domain":"devliang.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:02.465Z","timestamp":1791564602465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devliang.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 15:44:00 GMT","end":"Wed, 23 Dec 2026 16:42:35 GMT"},"fingerprint":{"sha1":"84:CF:95:E5:76:5E:25:B9:B5:9E:8A:59:A5:30:84:0E:26:F7:FF:A6","sha256":"38:03:FE:AC:23:A7:36:92:B5:26:57:56:94:46:29:E8:9A:F3:CA:9A:29:E7:01:CB:8A:1F:51:75:B6:22:23:FE"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: umami3.devliang.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nx-umami-website-id: d0b6a8ef-18b2-4542-986a-3c492c7e08e9\r\nx-umami-hostname: www.nivoketa.com\r\nReferer: https://www.nivoketa.com/\r\nContent-Length: 378\r\nOrigin: https://www.nivoketa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":378,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"d0b6a8ef-18b2-4542-986a-3c492c7e08e9\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"NOVA — 探索空投机会，学会钱包防骗\",\"hostname\":\"www.nivoketa.com\",\"url\":\"https://www.nivoketa.com/\",\"referrer\":\"\",\"name\":\"Windows-10.0\",\"data\":{\"version\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:03 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mp2UM9Us2gElO2i%2F41Qs7m7QWvjyTtRHBjZoz%2F8yFlY1FWoyLlCLDeCTCONj7elY%2FHsPWWXkApjZ%2Fb%2FiGu5Yr7H%2Fr4E1opzky6gcVP8UKJI1au6ySYUzzqQ%2Fyu3j7oGs8cFhI9YH\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47ee1cfe9d923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":1504,"mime_type":"application/json","magic":"JSON text data","md5":"ad0dbd9fb6f4480f401fe32417177469","sha1":"e636909e48361f6fd1b3e1c53f19621626ca4877","sha256":"bc2c385aef269198aa975a2a76b33e4eb7b1bd4bcac7efd53d3a14d62e6e730a","sha512":"02b2cef9fa12f441d1a35ee5a15d6eba29d46f5ceb42dbb9a28f59c9671486f592c6d7b4e0146724cafda49fcfaaacfe69c16f7f544029fbba6913a5b3d88b6d","ssdeep":"","tlshash":"2cf0a396f492efcd2d61b3410dd530c1d10866eb17e1647590fab17a272ead3740633e","first_seen":"2026-10-09T16:51:54.372444Z","last_seen":"2026-10-09T16:51:54.372444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"umami3.devliang.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/media/level-up-zh.vtt","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:07.766Z","timestamp":1791564607766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /media/level-up-zh.vtt HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:07 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5W1u0zUbrik9YaKcrHBLmvI66xmzfB7hn08OFj9zgIIZKVcxwaF9rnxdHS5z1fuK0p9F1XhzHyR%2FqWbw3jB%2B9r4GnyO5FsbV%2FffZwvieqf%2BaJtw6sCZzVjFxBJIRyRkFAHVs\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47ee1ee89c775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T05:43:33.194904Z","times_seen":19018648,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umami3.devliang.xyz/api/send","fqdn":"umami3.devliang.xyz","domain":"devliang.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:50:11.198Z","timestamp":1791564611198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devliang.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 15:44:00 GMT","end":"Wed, 23 Dec 2026 16:42:35 GMT"},"fingerprint":{"sha1":"84:CF:95:E5:76:5E:25:B9:B5:9E:8A:59:A5:30:84:0E:26:F7:FF:A6","sha256":"38:03:FE:AC:23:A7:36:92:B5:26:57:56:94:46:29:E8:9A:F3:CA:9A:29:E7:01:CB:8A:1F:51:75:B6:22:23:FE"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: umami3.devliang.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nx-umami-website-id: d0b6a8ef-18b2-4542-986a-3c492c7e08e9\r\nx-umami-hostname: www.nivoketa.com\r\nx-umami-cache: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ3ZWJzaXRlSWQiOiJkMGI2YThlZi0xOGIyLTQ1NDItOTg2YS0zYzQ5MmM3ZTA4ZTkiLCJzZXNzaW9uSWQiOiI0N2E3NjFhMi0yZTM1LTU0NzMtYmM5Ny00ODIwOTE0MGI3NWMiLCJ2aXNpdElkIjoiNWYyOGY5ZDItYWJiYy01NjI3LTllMzItYjg3MjgyY2IzYTY2IiwiaWF0IjoxNzkxNTY0NjAyLCJ0eXBlIjoiY2FjaGUifQ.WQslLz2Nz_JaCCvDDtvtm_yMj9iop0QZXq0Lr5hFj2U\r\nReferer: https://www.nivoketa.com/\r\nContent-Length: 239\r\nOrigin: https://www.nivoketa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":239,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"d0b6a8ef-18b2-4542-986a-3c492c7e08e9\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"This environment is not supported\",\"hostname\":\"www.nivoketa.com\",\"url\":\"https://www.nivoketa.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:50:13 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edCEH%2BgPpXIulqvIGzjGPOmZUfgn41S0pl0UeRWHzOlyF04tEl7b77CYtBqkXbpHtGek9HlKijvOE%2BMs3%2B0uzK0f5LSMj%2FIf%2F2GRAbFjG0HJOOAG76kVpct1EQ7TymusSHvJswQn\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47ee213688323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":1500,"mime_type":"application/json","magic":"JSON text data","md5":"ad0dbd9fb6f4480f401fe32417177469","sha1":"e636909e48361f6fd1b3e1c53f19621626ca4877","sha256":"bc2c385aef269198aa975a2a76b33e4eb7b1bd4bcac7efd53d3a14d62e6e730a","sha512":"02b2cef9fa12f441d1a35ee5a15d6eba29d46f5ceb42dbb9a28f59c9671486f592c6d7b4e0146724cafda49fcfaaacfe69c16f7f544029fbba6913a5b3d88b6d","ssdeep":"","tlshash":"2cf0a396f492efcd2d61b3410dd530c1d10866eb17e1647590fab17a272ead3740633e","first_seen":"2026-10-09T16:51:54.372444Z","last_seen":"2026-10-09T16:51:54.372444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"umami3.devliang.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nivoketa.com/script-1.js","fqdn":"www.nivoketa.com","domain":"nivoketa.com","tld":"com"},"ip":{"addr":"104.21.2.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nivoketa.com/","date":"2026-10-09T16:49:57.848Z","timestamp":1791564597848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nivoketa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:07:42 GMT","end":"Sun, 03 Jan 2027 14:07:41 GMT"},"fingerprint":{"sha1":"86:E5:C8:A5:51:4B:39:DA:3D:59:72:5B:56:49:C0:21:5A:57:D9:B3","sha256":"95:64:10:D1:8C:93:83:88:59:DF:DE:D9:07:BE:21:DC:0A:BF:C3:D7:7B:52:F7:C2:B9:43:E8:1E:2C:B7:7A:A8"}}},"request":{"raw":"GET /script-1.js HTTP/1.1\r\nHost: www.nivoketa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nivoketa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:49:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Dec 1979 16:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLyHlZaj%2FE4MHA7vT%2BetctkArLWH8ZWhb3mISnKVKkwEUNQbN%2FSGRmdmwgRYbtt5PtybNwyckHYYSUX9s1eZQih70P8v1iZZ1ZHpbN67kAR%2F5ZreBpLjy7lRekP55ISztkz9\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"12cce400-7f1acda\"\r\ncontent-encoding: gzip\r\nage: 1679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ee1b08ded75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133278938,"size_decoded":102461724,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35479), with no line terminators","md5":"cfc6d2c1bb9b63a41fadb0de8251caae","sha1":"2ba711f0f6189b6a971d2d33f0ec1ab1491f57a5","sha256":"a1f53e31c0ffaa8a9f62c88b8238675d3c857f33d608cf18280b76380bfaf517","sha512":"67f7f2dc51a6c372ec334866cbf9cd356b6e1ef700a27e153984bc17aacba7837d68d64a9392c388345710ea1ccad8d6f2dced1b1d5405b54c58be8331339954","ssdeep":"24576:usBXYmxNNR8g9ZrSEG3T6fTjixoCcdVNyV3sUn4/k0+caL/LV3KzvfcnMDVIgZUT:hBRxN4gjrBGj67jOoFdry9sG4c0+cazj","tlshash":"2555be6f53de76f045c92f8292897532851d6e33f722f8e45aa4674101dafef830a872","first_seen":"2026-10-09T16:51:54.374257Z","last_seen":"2026-10-09T16:51:54.374257Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}