{"report_id":"82f8ed49-0359-4469-8942-2c4883b40efa","version":0,"status":"done","tags":[],"date":"2026-07-30T02:00:59Z","url":{"schema":"http","addr":"hellokittysmc.com","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"172.67.172.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hellokittysmc.com/","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"title":"Home • HelloKittysMC","dom":{"size":56458,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23779)","md5":"62c918950428f0dab6bb078aac146851","sha1":"187d1a16eb37445e47423da47bf434c6c473367d","sha256":"54e1a9b52861c7a8c261f9d7bd97b79c383f87d9e0db865cf6ac15e05ac30959","sha512":"3106dd32e97a957f99893d471384b7fa19001bd31b8d2bd7eba7aabbf31441c9c8634002142f39a3160660a3bb294a8105c0c7848c40da09ef3fbc19a6c0dcaa","ssdeep":"768:aehnDWmzY+WbQjVYZVZyr0QJVHs4VIU6RWOSvP6EMtk:XhDDFVMgD3","tlshash":"9e430a3a26e1103f3c53c1e5e693bb5db62ae283d91b9ba9b58c42005fcbdd54d63608","dom_hash":"domhash6ad163a35ae6c77b00ef50c456827e92","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hellokittysmc.com","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"172.67.172.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T02:00:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":4,"received_data":34770,"sent_data":2236,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hellokittysmc.com","ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-24","domain_rank":0,"first_seen":"2026-07-30T02:01:00.531014Z","last_seen":"2026-07-30T02:01:00.531014Z","alert_count":32,"request_count":8,"received_data":12064061,"sent_data":4483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":6677,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-27T08:40:23.885085Z","alert_count":0,"request_count":2,"received_data":511546,"sent_data":1004,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c423257ce6bde1851c335e8f8f4e9bb2","sha1":"034de0a189bd5e766accc1122ab3a53d53c23cc4","sha256":"0656b912a5893ab56c590ef7e1edd2c9ae57bbff18b30a300cdd66f3f1486708","sha512":"a21bcd7fbf9351dd93a98f4d5d170224d0e7df81cba9da8da1c2cb354257c38d188c1f3c34d929c9783f5cc1389c0e720d268d357efba89a99a3980c48c463d5","ssdeep":"6144:LFQUPEz0+19zXEVy61LLeMP5mqNFPyF2pH7w2nXrPO0s:ZQUPEQSzXEVy61LLn5/CSbHbPO0s","tlshash":"22b43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","size":510091,"data":"","first_seen":"2025-09-21T16:18:40.255776Z","last_seen":"2026-07-30T02:17:33.499316Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f6c2561e9cd9f92879372c51422f5eb","sha1":"2d4722127cdc8c97f2b096972e3eee10842bf36f","sha256":"97f58fab97200e6988a19bd46539f284e3ee2f798ad2174f212bf9fd052eecaa","sha512":"379b54bfe9e001d9a2d7ada15731ac8d6f8afba616114ef7040c9de10beffbfa75b5e1214c2b4a5c5c3f9df468c667a068f0fe09fd9491255b31997768475bf0","ssdeep":"","tlshash":"62f0df0e89b12b536613a128994b0802b2e5018f2d2d7c3ebf4c12020f4d95ea978b2e","size":648,"data":"","first_seen":"2026-07-30T02:01:05.16589Z","last_seen":"2026-07-30T02:04:20.889252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"311dfe8efbf70c0e4049bfc4ae7c1de5","sha1":"0850327a35cc306b2d2eba9e72fb0c0c38191013","sha256":"5384459ddf799d8ec8919dcd21e952e6680c9074d32e35245f6669b7bc350a16","sha512":"77eca75de313cd3b7e238a4ba4c29dff73bf7f89b252d7a82722026c6ed33e188bd3154d3f4ca46ce809cc2f338d20bd953d08d816d37814046f432886055601","ssdeep":"96:DAOxo6A0X4HJrMq9IdBc6CSKXkArl5khswxb1xjGozr6Z78MyudsbA:DAOur0X4prMo2qSKLjFu1xKozr6Z7NyA","tlshash":"cac1542eb2f72471b0a3b5be275762082661b0133801d9493d5ce3444fef9695ab6efc","size":6136,"data":"","first_seen":"2026-07-30T02:01:05.167066Z","last_seen":"2026-07-30T02:04:20.890687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/?plugins=forms,typography","line_number":66,"column_number":26105}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.531Z","timestamp":1785376823531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hellokittysmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:57:12 GMT\r\nexpires: Fri, 23 Jul 2027 02:57:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601391\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-30T04:15:59.346859Z","times_seen":385190,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/hero-smp.mp4","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.684Z","timestamp":1785376823684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://hellokittysmc.com/\r\nRange: bytes=11468800-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Thu, 30 Jul 2026 02:00:23 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:17 GMT\r\netag: \"afa7d7-652ea9777c489\"\r\nage: 0\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4L%2BNrhPb%2B8clTM9yIWuiFyymDqtZeje9hvUw0PXJb%2F0KQR07UKx5yvAUBD6J9U%2BjrIhK7H5tZbvaRykco%2B3hhJZulFQqJojYgotFtzomK5mKOI9SR3kmkCektofF7kobAsgqQ%3D%3D\"}]}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 11468800-11511766/11511767\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4fc0bc2b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42967\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42967,"size_decoded":43710,"mime_type":"video/mp4","magic":"data","md5":"c3523efc36f9c9d4ab0a08266a80965e","sha1":"308369075553763e2b1e875a40e7bde562193440","sha256":"96946d388e22039ebb1d02bdd55bd3f3aed791aec321e0411d2a199215730e25","sha512":"36c7d540789c5136e02e3c8abed27a461fac94d690bd06a426d71f439558f89b9b21ce744c308e93394b3802713bb4665523a49389f0fc1c6d0671319abf3f7c","ssdeep":"768:D/56acn2VFC03r44lnuQROT6C17XYftlit4PZ9jQ5Y:zcaFtUUQAifY","tlshash":"96134a9327226723c2112a7cc4fb13057370da8adbe79797da81d6712dca3891705fda","first_seen":"2026-01-09T01:16:04.626998Z","last_seen":"2026-07-30T02:48:11.717522Z","times_seen":63,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/hero-smp.mp4","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.789Z","timestamp":1785376823789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://hellokittysmc.com/\r\nRange: bytes=131072-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Thu, 30 Jul 2026 02:00:23 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:17 GMT\r\netag: \"afa7d7-652ea9777c489\"\r\nage: 0\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDjTorYyXSqXyjavZ2H0YTVReHmbOL8ML5SqupkVA27WJwKL1L1saebEhUuKdEdQ1HPUOHSLR4CzNioiqeJ%2B%2FpzapijlfDSjzPxxA5Wyx2Gn%2FzcGZT8XDhS5Y84SZZ%2FfEuPxwQ%3D%3D\"}]}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 131072-11511766/11511767\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4fcabc9b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11380695\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11380695,"size_decoded":11381437,"mime_type":"video/mp4","magic":"data","md5":"29078f15157d5f5f2117214c08045c35","sha1":"ffe29dea448e410b6071f1403cdf45b184b63f55","sha256":"d9f413ebd857332923d2518743236564a61a87cba3b598fdd6f88140a69cfdd2","sha512":"f07e25eee54beb8a203d5f257d1f7de43034d123ea2c5221f54756fe237bea6a6ac59eda48f3a401a734086355fed8812f831c39650c76be61202d04139bda8e","ssdeep":"24576:pVmnSzIJ0ZKaFxKwnhX3IQ6cwJKg+0AG9vmNNULAZh68B2CnaF7rtpGK/1:TmJJ0HFxKmWcw9+ZGhmrUL868MCni7Xx","tlshash":"aa2533e943ae539c905386ae651e20d5d8628b9c9b607f03f8fc915107d8aee1ef87c4","first_seen":"2026-04-05T20:24:12.787251Z","last_seen":"2026-07-30T02:17:33.509898Z","times_seen":8,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":498,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:22.807Z","timestamp":1785376822807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Jul 2026 02:00:22 GMT\r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":1243,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4b874a96c6e11344f7b1939c38f87e2","sha1":"15879e821b5dda4854585c17a9bf43d5c8eaf8b5","sha256":"7e933b9d624b6b5f720d276780008035bcf7ba564403d931532059e9041e8bd1","sha512":"0b3488b90e5a4f635cd59b2c2d5bcb018b5bd377e0e00cd095d33fbb81d0f84f62429485639ecba7d0e2bfeebffc6544ae19ff7e02221a257f7e7cad1edacbe5","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpE:lgKQcXr3lVwa3RzJ/apsn","tlshash":"3cc19cd1087be114ab871cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-20T07:37:39.957294Z","last_seen":"2026-07-30T03:42:46.929508Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/logo.png","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:22.816Z","timestamp":1785376822816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:17 GMT\r\netag: \"1eac1-652ea97740e04\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2jIW37%2BtjH649n8UtONBHzeIPa1knrEdIYoxhJPxsyxs0I3FcyKVN2nS95XTcM2V9itmNGKRBIf1rVMvx4wuaD28ZggP%2Bs6rhQF9pWVdUMcWHn2WNHEBff11MvZvg52ojqNUg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4f69badb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125633\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125633,"size_decoded":126333,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-07-30T02:48:11.71225Z","times_seen":63,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.534Z","timestamp":1785376823534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hellokittysmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:21 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46202\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8000,"size_decoded":8811,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-30T04:19:10.561047Z","times_seen":284860,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/hero-smp.mp4","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.540Z","timestamp":1785376823540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://hellokittysmc.com/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Thu, 30 Jul 2026 02:00:23 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:17 GMT\r\netag: \"afa7d7-652ea9777c489\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dm1xTs92Owj4ylbw3STi18%2FYYgDRGNXEpHFJTsANQjsUK9fJkb9uaTr50NCily03cUYbPj6WPBMfgkznZuPA3lavvVPgf0cfVDWfMrmTNQqkE1ypU5SIHZ4sUL4C0VIPUNMz%2Fw%3D%3D\"}]}\r\ncontent-range: bytes 0-11511766/11511767\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4fb1bc1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11511767\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155331,"size_decoded":156057,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d7834ce933b6e17e43fa34f2c7d64229","sha1":"092a160a4af8e0a4d3d49139df41923d1b1c97b3","sha256":"98632125031a8a2d17c5632178ec463ba6e4ef16987cd7c017fbb2f523aeea6c","sha512":"100eddce326dde2aa882201fb109a0204777442fe13d9fc1c95f12a31ce65edd14cfb7ef7017697572aeb4bb3dced1106b3b3b5daeed7da3e4073b7471d7e99c","ssdeep":"3072:nF7Po7FqVzIc0i2VTwSi3wnU/19WsA86aThC6cPd7pSaN9AVZ82JN8Gyj:hSoVzf0VVTywnqVThC6cPd7pIVG2J9yj","tlshash":"cbe312c88f1c349c92350ceb24024f9d4743df77b66b2e6157b6971285a73943f298b9","first_seen":"2026-07-30T02:01:05.160528Z","last_seen":"2026-07-30T02:01:05.160528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T02:00:22.241Z","timestamp":1785376822241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.12\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=()\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; frame-ancestors 'none';\r\nset-cookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti; path=/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pku7cfgNMSodVrM0qsevbEwaKwBOYoj6UnPfmi5SH0JEaMhr97AU%2BRndZfs2KK5F4gxVEksqhtpJu1ycOoWgYuQzRuLXpIuhmhTtzFQdEA5XZJlqHe2QkElI6Ztjt5ZqhINpAw%3D%3D\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a230c4f32ba5b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":34163,"size_decoded":9956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"aa9ea6dc0a3e03f3cf6fd2aea922e159","sha1":"9534b799fbcf88dedbf52010aca8a9297b0bcef3","sha256":"917bec0ed5b5b4f9254482bffe79e18a69a27c790d81a78b813ea87950bb78e0","sha512":"367366a076cef5a8d2231a3032f769a28e681d31f02ebdccef5d88267e540b1c5a032213a64df7483973c39cb8dbedd0fda1ab5ed32e705079050f2e192c46eb","ssdeep":"768:r+ONoVyT6emPN0LkPwgxaSDn/ZQTSm96e6:20AYwYE","tlshash":"72e2933421c1146a51b3c3a5ab63af5dff669303d603964a72ec97831ffbc44c963a68","first_seen":"2026-07-30T02:01:05.161568Z","last_seen":"2026-07-30T02:04:20.877126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":338,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=forms@0.5.10,typography@0.5.16","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:22.948Z","timestamp":1785376822948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17?plugins=forms@0.5.10,typography@0.5.16 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fpfdk-1783907304864-0fe3a8b1437e\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1469517\r\nlast-modified: Mon, 27 Jul 2026 23:44:38 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tk0ACKvvqs387xnQumSjMy5XDyt5e3z9kfeHrA%2BwJjIasfAx4oh72Ve5Ob6E2oDR03E6%2BALyNwK2xdeaDhNpUEEb3X%2F3qPWG%2BRiTLUw3hSFxgR%2FaZfteaARMF3Jh87IGS73wvk%3D\"}]}\r\ncf-ray: a230c4f76ce81525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510091,"size_decoded":146116,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"c423257ce6bde1851c335e8f8f4e9bb2","sha1":"034de0a189bd5e766accc1122ab3a53d53c23cc4","sha256":"0656b912a5893ab56c590ef7e1edd2c9ae57bbff18b30a300cdd66f3f1486708","sha512":"a21bcd7fbf9351dd93a98f4d5d170224d0e7df81cba9da8da1c2cb354257c38d188c1f3c34d929c9783f5cc1389c0e720d268d357efba89a99a3980c48c463d5","ssdeep":"6144:LFQUPEz0+19zXEVy61LLeMP5mqNFPyF2pH7w2nXrPO0s:ZQUPEQSzXEVy61LLn5/CSbHbPO0s","tlshash":"22b43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2025-09-21T16:18:40.255776Z","last_seen":"2026-07-30T02:17:33.499316Z","times_seen":168,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.529Z","timestamp":1785376823529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hellokittysmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:20:07 GMT\r\nexpires: Fri, 23 Jul 2027 02:20:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603616\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7824,"size_decoded":8636,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-07-30T04:35:19.26015Z","times_seen":30221,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.536Z","timestamp":1785376823536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hellokittysmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:00:31 GMT\r\nexpires: Wed, 28 Jul 2027 23:00:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97192\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8627,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-30T04:19:10.569751Z","times_seen":289966,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/logo.png","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:23.785Z","timestamp":1785376823785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 02:00:23 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:17 GMT\r\netag: \"1eac1-652ea97740e04\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9M5xlWuGf%2Fi6xSvrFjoaU57SaAZVo0sX8awaMWLlvwzt0oCZ52AuOELSLYbd0ZUoW2HGr3bGweCYj7Ktl6cAiGzgDDVHGgvsftWOs%2B562c5ZIWGCFkRjsCKYvP%2FnAyX8zG4N4A%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4fcabc8b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125633\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125633,"size_decoded":126345,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-07-30T02:48:11.71225Z","times_seen":63,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:22.806Z","timestamp":1785376822806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /?plugins=forms,typography HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=forms@0.5.10,typography@0.5.16\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::l57dm-1785376530581-3a48c58840ad\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rbjOMGCjKmX3yRJJ325wZkM5YnfIbkJDcdcl%2F%2FefLMRMtwH0qAbViOvhXNPM1bEnBeYth3316A4fPISv5KXvJ70GzbE5SpDwJtWOScZLpRsT%2FFTJRGKGRbJWiwH7dZgK50k37A%3D\"}]}\r\ncf-ray: a230c4f69b911525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T04:24:56.442206Z","times_seen":17610560,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":43,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/server.jpg","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:22.817Z","timestamp":1785376822817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/server.jpg HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:16 GMT\r\netag: \"12b47-652ea976d844d\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDfFnqomPPq6Z6lucK9qIiyHW89njT5sMYOYSodWvAsWtzfMj7nUN018rGlXMAt7LBXlgAo9b9i9efLj%2FF45dJ0SSN%2BJ79whp1KlqH79poK7uMNXt4gPnntthcOiURlbdo7ujQ%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4f69baeb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76615,"size_decoded":77315,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 800x450, components 3","md5":"f305632c1b73d612096e946b0cf5d511","sha1":"b7319c7f513035f060cb9cc12a11db0564afb575","sha256":"06e41d5c5345ec9b6b82fee95984876bd9bdb778d232be004746eb475a94b6e2","sha512":"dde45c10f17564c142e1b7d0d268674865ca0404093b7a91c46acc20f044da2bc0604f2a91864d553bdd7765123be696a4bfdf32a1debb91bef9c0b2ae96b153","ssdeep":"1536:TbJGp1hUTafTJSPBJozNZVNTDZvdbc/hcSrRN3P4zz36grRv/1:8pIsSPBJKr4/BrRNP4P6g9v/1","tlshash":"14730230829f65b05721967c5f47f9e9acae00e2503bfe0c94421a3eb924b84886f727","first_seen":"2026-02-26T23:12:44.922783Z","last_seen":"2026-07-30T02:17:33.506405Z","times_seen":49,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellokittysmc.com/assets/server4.jpg","fqdn":"hellokittysmc.com","domain":"hellokittysmc.com","tld":"com"},"ip":{"addr":"104.21.30.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hellokittysmc.com/","date":"2026-07-30T02:00:22.818Z","timestamp":1785376822818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellokittysmc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:47:08 GMT","end":"Sun, 20 Sep 2026 00:47:07 GMT"},"fingerprint":{"sha1":"DF:67:F0:2E:D5:61:F6:4F:F4:EE:3D:85:F3:82:F5:5C:9D:13:AF:F1","sha256":"82:AB:AA:27:79:14:0C:A0:3A:EE:CB:82:C7:CD:55:48:64:15:02:29:B1:7C:E0:1E:2E:67:5A:24:B7:C4:10:3B"}}},"request":{"raw":"GET /assets/server4.jpg HTTP/1.1\r\nHost: hellokittysmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hellokittysmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1irof9hn33i42qsjrg5no7kgti\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 02:00:22 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 29 May 2026 01:16:16 GMT\r\netag: \"1c819-652ea9771db1a\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6av1MyNljeiTa%2BfYUUPcPDM17wxba%2BrpxEPCXMCwYK1a2lGqw1ABxeU9V0Th8WxNA7PZfshVBNhDcsgkLCF3FVtdiKQAq4UI134eluotIDC4sNHcT%2F8uNzmR5txhBfBfs0mCOQ%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a230c4f69bafb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 116761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116761,"size_decoded":117464,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"c85a1ab05bca3cea481c57248f2d1470","sha1":"82efa45d77030a873dfc1632f3531e1621e52e95","sha256":"b36ca594514b5d000e3fc9490f2e49fd7f8d31bd7cc576f2b3b772ff8eac0825","sha512":"f3eabb0da219aa687acad576a7000665e7f1b7ceb327f02a0d713d0b42a372da98a097025d1fe3c3fe93a7f4b6818e5c0a35193b328b44af54f3699b4785e14e","ssdeep":"3072:sdB5MkhyCLmcrhXZhY9Ksuy0FK4/3JTOn/:sBMRqhphYcsuZw+3JTO/","tlshash":"82b31287a3fc1156537d18bd203e00a6907e681f32216b5b9d7f7d80df0afa848b45b9","first_seen":"2026-07-30T02:01:05.164974Z","last_seen":"2026-07-30T02:04:20.87961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hellokittysmc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}