{"report_id":"dca850d5-9c31-43b2-a781-95e3f4fe7451","version":6,"status":"done","tags":[],"date":"2025-07-06T12:00:18Z","url":{"schema":"https","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.80.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"title":"Suspected phishing site | Cloudflare"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T12:00:18Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"keyboardcat.world","ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-26","domain_rank":0,"first_seen":"2025-07-06T12:00:19.516831Z","last_seen":"2025-07-06T12:00:19.516831Z","alert_count":25,"request_count":25,"received_data":55869,"sent_data":9798,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-07-02T16:09:43.240312Z","alert_count":0,"request_count":8,"received_data":590205,"sent_data":5250,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.207718+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/cdn-cgi/styles/cf.errors.css\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":914},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":10,\"bytes_toserver\":1283,\"bytes_toclient\":8421,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.358986+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/cdn-cgi/images/icon-exclamation.png?1376755637\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://keyboardcat.world/cdn-cgi/styles/cf.errors.css\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":459},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":14,\"pkts_toclient\":11,\"bytes_toserver\":2089,\"bytes_toclient\":9453,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3244f09507ee48f5a85ae5cb92167245","sha1":"a5fb25e93e9fe9b4db2bd6c59e8500cf851ab0c5","sha256":"ab4e88f0f214cc197cd3bc931e1e968435b9978688d5388c35967bc136923030","sha512":"aa0a1b86dd224ca5dfd640cd3e02c67bace31f1a228a1d4468a778b754d9cd53f70a3dfb41d8327caeb9b96e20f7919526373a2b968acbfe5348d608dc4a2cfe","ssdeep":"3:N/BKL1XMXm:eL1cW","tlshash":"c35504c05c4074753434c514d15074157c0504003315040370dd04d417311030054540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.092761Z","last_seen":"2025-07-06T12:00:23.092761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9db014a82be104c331477c07cb993fd2","sha1":"24ae6282c5443c24c678966971c444afa05a4ae6","sha256":"df85e673ee011929317e8273d8e1110ecf7f2b14c8dcb71e7fb00e3246bc383d","sha512":"f68ccd9a847202293ff2b16dbd5f945377b05e17fce2b9016370c260b4cae32bfc77e5515049ae43e69e8b6da45493081faa134315522857557e7472d4b970e5","ssdeep":"3:N/BKL1XMX3n:eL1cnn","tlshash":"865504c05cc035741434c400d15054557c4504303317040170dd04d41771301005cd40","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.094885Z","last_seen":"2025-07-06T12:00:23.094885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ee0685eba3351a8e16c30de2c55a30f1","sha1":"07bd8d4b1a448a25cce718d9c227a1cec4f528a9","sha256":"b569174581402ef0c99e10fe9ac3b1aa40ee045bffec89ae088ba08f9fc930cd","sha512":"1082396f5d2ad56b45e4ef90a9f3aa5dc479c0015caf8277fda378e27cde2ad285652864e6ff43c35358d542c27104d1c871a95fda3794193c546ea73fe009ed","ssdeep":"3:N/BKL1XMXQTn:eL1cAb","tlshash":"8b5504c05c5434745530c400d35054157d050c403135040371dd0cd4173014100105d0","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.096586Z","last_seen":"2025-07-06T12:00:23.096586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=95aef047af5356c9\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da3c88b4048858fa0c759ab6b46b7a50","sha1":"0db40f91bb465c32957478cd9f76f6544064deb1","sha256":"98f78ef329e08be8162a1d4a9657fc579cf8734b4a81d8d25723a72f7a36ea1e","sha512":"67c41caeb4e9c9a9c6be3233a04e55ec083c53d926409cc9c1e304a5d8984cd61a086df32d40ceb953fbb292df12e5a4092de532d71e926af296733ea5190ae2","ssdeep":"1536:0iO9ylLbs3yeN31HZQKD9N75hXdV6XGaT/TbPO4hvIMDb7sW/TGjdqlKn5GHEftO:0iOf3JQKn75r6/TbWWLgnJftp8d","tlshash":"0ee3f88d3dca7a534321607919e376dbb19b7c88201c4b0dfb0489e43db47197aeadb9","size":146551,"data":"","first_seen":"2025-07-06T12:00:23.082509Z","last_seen":"2025-07-06T12:00:23.082509Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64d82d53f777bc7d6c5d0ad0abe0007b","sha1":"c4be82b2789a114220c4dafc4d69c69a5dde1944","sha256":"166ffe500e2bbfd7e277d66b12042b7a47727d988d3f6f3dc0e9e638f16540ba","sha512":"cbfcd3dc09aa5cb522c905661b69f743374f28b2b935eccced9ed47df4680f3bf165d5e43a014f15bfc67fe251d9ffb940d8e618fcd8e83b80190f5d26f90be4","ssdeep":"3:N/BKL1XMXD:eL1cz","tlshash":"9b5504c05c4034741430c400d35074157d151c013355040170dd1cd43733101045c540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.098Z","last_seen":"2025-07-06T12:00:23.098Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T08:07:43.117448Z","times_seen":143894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"21731c70f61c90e98cf4d1a441a6abdc","sha1":"b0838f6308566d6433d2f6df4e547a5743a6dbe4","sha256":"21c08cc20306c3b6780b31077ee9bab56d9422471fbf10ce9c2f9660d7b7d9a6","sha512":"883568f3bdcc2b7f12d3d9137bf0589a8e9fc6c7cd2351e2eb662e0539c93bc9791d83bf024ef01f8ce20d181dea3ff129aebaabcb85e13ffc243d8b2780ee8c","ssdeep":"3:N/BKL1XMXuQ:eL1cP","tlshash":"bd5504c05c4034741431c404f1d454157c0504003315440170dd04d457311030155540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.100038Z","last_seen":"2025-07-06T12:00:23.100038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b795e2943d16212a106c93d083889426","sha1":"cd65370a3718d3e49a67d212a01435457e2667c4","sha256":"c99c5c2c066a167d8f2dd03977ec0a96b91747f205c013b66c1ad1d391209eef","sha512":"3bf0c92d7da6d54e115aa2e9cf6085a9b9776029bd108ad8dfc7fb6fd213254fed1a57623c9753f75f41230e4b7a1f11ecf514a7b4cc4509a72cc4e88f5e7d56","ssdeep":"3:N/BKL1XMXQRNU:eL1cAw","tlshash":"975504c05c5434743530c401f15055557d0704c03115040173dd04d557341010030541","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.101299Z","last_seen":"2025-07-06T12:00:23.101299Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0729533728623493c38023919604bd39","sha1":"17a1efcbc78bcd300914166c73c23b40bca59ffc","sha256":"a86e8207b29ac141468d8d8dda78189672254340566cbc2e73c392a204ce1449","sha512":"5d2906562e3d7dfb4da3db0b237384b37838801270f15ea612244e1b83d8b8cbcfd8fbb0662dd0d728840cfedfa9574b57de31207aebec3aa62152d9b04d2dc9","ssdeep":"3:N/BKL1XMXZ:eL1cJ","tlshash":"da5504c05c4034741430cc41d1705415fc0504003315040170dd14d437731010c54540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.102609Z","last_seen":"2025-07-06T12:00:23.102609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49fd3520fec53a9cbd6d75f228f285d8","sha1":"550fd3457362da2051ed75022bdcce02798dff1d","sha256":"c63115b0a1f92e901426032f802f03eff5b4449fa651c61c1a2add87a7259261","sha512":"c4f61bce31256847a5effd8dad73e9a5a969042e80528a459c095bf8712229f19d161ab7367b412a076cb8bd0d38d2ae633551819a8f18dfbf998c280111e4c4","ssdeep":"","tlshash":"7d51fa8dd43cc59bb2f525ccd64ef3233e13118b8a44a0a97fd2484e191ab6b8195dad","size":3164,"data":"","first_seen":"2025-07-06T12:00:23.103959Z","last_seen":"2025-07-06T12:00:23.103959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f862bc3d182110a294d2eee80261819","sha1":"37ecc6b5e0fc5559cd9e42c0a65989bd15e35289","sha256":"570dc832bc51da6bef4677837df2cb83d8664254efabc0f2f6bf198e4d6d934d","sha512":"c97a2a62a5567b2f0f9fd3d0144b5e4add04374e42229ebc57be0d1e25dc6a83fa184c9ab5e1ded6c5d852e7cb2f0e4b5a886565b63ba8f6f6445b806f4a0eb9","ssdeep":"3:N/BKL1XMXQQRG:eL1cAQ0","tlshash":"d45504c05c5434f41571c401f15054157d1504503515040171dd05fc17301010030540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.105656Z","last_seen":"2025-07-06T12:00:23.105656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0184599aa8d769edf7a8068c590cefe","sha1":"0df21bd93a7b4ba0412b98a2ac9070a42c6235ff","sha256":"6827fc852763077b8e35c289efcb07af732db0d9e2523804bfb04aea68f6ab91","sha512":"4d9084a6e382e54277134368e884d46d326713df7b4cf5bfd9082c755bd444431cf678e1dd0011b3c08bb449594c995279aad45abb75e078390f42b3a1b660f9","ssdeep":"3:N/BKL1XMXJc:eL1c5c","tlshash":"2a5504c05cc034741d30cc00d1f0541d7c0504143317040170dd04d417315010054d40","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.106893Z","last_seen":"2025-07-06T12:00:23.106893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab1ac4cf0f484cc9f859c0a7983353e0","sha1":"2da142b1135bd10cdbed4a7353e4483acc30ebe9","sha256":"50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324","sha512":"9e2901fe2c4505797cbc7d3853280cb3450188bd0cba66ffe5c8055687578c849b31a74c6b56881bb07c195217e9604a88ba6995a4275419ca076424ebe88b0a","ssdeep":"","tlshash":"73d0a72677ee14a8129bb031154e2705212180024002870d7a1c92359fe0e2708259e3","size":210,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-07-27T06:29:00.922508Z","times_seen":382532,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac6a43f1748bd8839380fb9af32cab14","sha1":"890223d89c6b05daf181cdc1f4e5453d6393a356","sha256":"81332395e5fe8450a6c9160f762ec5e956d7d9b5e6c907f96091a40ade56620a","sha512":"da344bb7c88d432f640f6b6081fdeb65d5d6982d9ab5af403c873df006341de006d3ff49f1ed92e4309b27b736919b8543cf882e3399a38b30c4537c13e6f388","ssdeep":"3:N/BKL1XMXWW:eL1cGW","tlshash":"c35504c05c4034745430c400d15074157c0d04403315040170dd04d437713010154550","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.108992Z","last_seen":"2025-07-06T12:00:23.108992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T08:07:43.117448Z","times_seen":143894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d78eeb064d790d3defba950dc1b30b3b","sha1":"207141ff9fbadefad4ba122fa594802637341652","sha256":"5b58b6c6d39d092e811e13b6b5e96913ca3183f47391362d2fdf8d06957ff625","sha512":"290ee8c93059e305dd1596b77cc46e2760be2d335e9cac33b626689461a2a7b8a838be0260b36c2b16926d9e47ebdd164de20420dc8ec3eac36d705335538aa1","ssdeep":"3:N/BKL1XMXe:eL1cO","tlshash":"3f5504c05c5034fd5430c401d15054157c0d04003315040171dd04dc17311411154540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.11018Z","last_seen":"2025-07-06T12:00:23.11018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34df99ef0602560c811e58e4711c99e3","sha1":"88dea8841635da3e1130ce19e3718ceb17a95a35","sha256":"18a52fd2cc16c86bcba28796b0e231144f219cc87e049c41d9d378b880a42fba","sha512":"df8104390e5066c45a916d84fbfe2f754d6a94cf429dd6cf62e207193f298db51f17567e50c87bc2842e2a0888ed75fc564066ec863dfcbf9b4362b9bcc8a7bc","ssdeep":"","tlshash":"ebb0929f218316b4179e3a76d02a43667620501244199800fd1ca6948f9195a808bd4d","size":115,"data":"","first_seen":"2025-04-28T14:01:07.115316Z","last_seen":"2026-07-25T08:14:23.699266Z","times_seen":141409,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-07-28T16:58:57.708351Z","times_seen":535329,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"403617d76699000ec86d27178bfcf2a0","sha1":"a553eb516cdca0640b363b4c4ef6cfaaa40b69fd","sha256":"fb4ac1895891c62f5fb35e719ed6820e6a9b27dd5cee87e54f2660cce2e28373","sha512":"c36b15662a948600a4265fbe20b57c139d3635a24e40d1d4be0fd2c9ff8a64d8659c0869b50e0bf11c1861db06fc5873bcfce29637a47ecfd5e52404c7521b9e","ssdeep":"","tlshash":"c511499dbf94705513021cf9a8b7c0098256fdf8350a14508714e1c83c79e38981ffb9","size":1099,"data":"","first_seen":"2025-07-06T11:32:22.760296Z","last_seen":"2025-07-06T12:07:09.701423Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc300bd8bff9a31e069af7f1a06d5b8b","sha1":"61aecb3b0d6202774ce8b5bc190e4f0f22d08359","sha256":"39f8c90e6d29ce6fba9fd59556ef2ee6477ed39ed4c84512263d9e3ba7bc7bf0","sha512":"ec1fc188d7e2fd5ef41a5e0e0505292c116217e1478eb1065c1b436e2430177086450abe60cf96e63440533fcfd84554757c5481ed4500d60aec3b7fe988795b","ssdeep":"3:N/BKL1XMXgTn:eL1cQT","tlshash":"c25504c05c4034753430c400d15054357c0505113315150170dd04d417311010054540","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.113183Z","last_seen":"2025-07-06T12:00:23.113183Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b98ab0c9c1187379712de2162d133c8","sha1":"13070544fcfc6954ce563779c26ba54b72271380","sha256":"73f6150de629bcd8401d4778d9a4f5460cbcce244f913447acbdd25ad50cca25","sha512":"7aa5c5b8d948acfb8b577a1c327c46b9f3cbe029d79fbbc9b9d40f74cb58c69c74b01d56d900755c9236b40089e5d4991904ce83683bd2186372621d8c88f746","ssdeep":"768:ECb719MkF248wa0rnnn/A2WNwyjj41fCXV2WqDsntFLNYyNiyY1LBep7iFFQ7XIQ:KkF2nwa0rnn/sif2HLNxig","tlshash":"be232b587166787227d980e0617ba7437325793ae94ccc50e823c97536acdcad233fba","size":48828,"data":"","first_seen":"2025-07-03T19:42:34.954063Z","last_seen":"2025-07-10T20:59:27.527001Z","times_seen":16770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T17:57:55.658983Z","times_seen":787909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f6161217e242dffadf4241d174abcc","sha1":"304832d02caf7b8a45ea29c321993d7eba48be67","sha256":"390eefa5af21228aaab4bb7eb68043b2468a645b3c861aaba17b226cc8c05d95","sha512":"886e6c321c801fa26a1363e65eb9ddd6f15617044d57f2b458d235cb396119dbc35e216178258e47ed6a73ad9a6f558e12605621bb3bae8e463c56ae6f9f6d18","ssdeep":"","tlshash":"869004534011730005710337175555403335501310314c0437cdc1153f51f57cf05340","size":46,"data":"","first_seen":"2025-03-04T09:24:28.966015Z","last_seen":"2026-07-27T06:29:00.923677Z","times_seen":246311,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c26c888ac353427ff01098e046c33c7c","sha1":"1321ad9198919a424c678a7ca1d19d93f52eb0fc","sha256":"ec343606cdeda8578dabea8ecf0d6118de925d2dab3516c04fac60e3e6d45ebc","sha512":"f4124d7ca0376e6acc8602651bb4c64e15a867c56899e2c108094bdd9045e65e95901e1579449e1d44f8a5137fdce8d61ec7016de3d6531eb0c29d6e78f1db6b","ssdeep":"3:N/BKL1XMX9:eL1ct","tlshash":"145504c05c4035741430d441d1505415fc05051033150c01f0fd05dc177d1010054d40","size":1337359,"data":"","first_seen":"2025-07-06T12:00:23.11534Z","last_seen":"2025-07-06T12:00:23.11534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-28T16:52:32.772811Z","times_seen":1033244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-06T11:59:52.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 06 Jul 2025 11:59:52 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLwgedaKz%2Fucer82V%2BVCwzCHF1ytSbRsiKkGEjEVqzwFR0A696lc3XWs0X3uuSnubHwZ%2FN4xJ0O8x9FHq%2Biyyk5gRlOARxtn9LqY7PDB6g%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 95aef0433bac0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":4983,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"3309c2cd9105490dda22a042af5afe1c","sha1":"4114653f7722f34fe835f36a194ac3e107333aa8","sha256":"9254072e9677c6f0d6f9835729833e32c94e5a3cdc932e2acce0b101bb1a213a","sha512":"76c83f685c872dc0fcaa819a6e7cfb985a11f41220420d408f00d7f21ff35c18a09096334f53240e9efd1e64351d247513049f7be4ebce9df7225bbf673a67c9","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GXlqZNeBu47RLlvaQxvbzM:fjFj7jOjEjK/VounOVFqZyu471lCejzM","tlshash":"00a17572f9bd147f20d3927261bda70a3aa5c143cb9b08907abcc2751f8af55ae131c5","first_seen":"2025-07-06T12:00:23.073275Z","last_seen":"2025-07-06T12:00:23.073275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k%2F2tYF0%2Fk4KB2aTd%2B2dZXZssSeHXCQ74%2BvIKZzMUbFQw3obKgezk7g4kAaMk%2BlUS7eU4rSQzTPZm43rtxiPT9Bqu7ivK6zOjZrMXs4XcjAYtH%2FRwDH10LXUYdoLIx9LS34U2EQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef0524d0f569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3013\u0026min_rtt=736\u0026rtt_var=1628\u0026sent=123\u0026recv=132\u0026lost=0\u0026retrans=0\u0026sent_bytes=22771\u0026recv_bytes=9927\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1366\u0026inflight_dur=254\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-06T11:59:52.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 06 Jul 2025 11:59:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1VyuiOw5ucBD9hWHWAEYfHuaWdbwQXdWdrxIll%2FV4XJVUkgHL3JXyo%2FE%2FE7T7XxrUzkFbGrkJF9d1rtIIXGjFf4%2BxtJibINX%2BD%2BevevspA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 95aef0406d9d712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":4983,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"969bd9269f8ad26a8632d1c856e259f6","sha1":"e0aa896073c54291c43582e378f5377101b3686e","sha256":"f7a807f276b7669a062ea30bc32cd2ade24a531f81b6641543e13ef25e65c59a","sha512":"ac343ebfee88004ecb95b57a8c1ad935beeff32ff329d81be41c6262eb74b46945a1f8680cd080f3688117fd69f165ca570ec404831ec6c5ba1eb3e7dce86d51","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GqlqZNeBuY7RLlvaQxvbzM:fjFj7jOjEjK/VounOVkqZyuY71lCejzM","tlshash":"81a18472f9bd157f20d3917261bda70a3aa5c143cb9b08903abcc2751f8af55aa131c5","first_seen":"2025-07-06T12:00:23.077829Z","last_seen":"2025-07-06T12:00:23.077829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":33,"dns":2,"connect":2,"send":0,"wait":18,"receive":0,"ssl":27},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:52Z","timestamp":1751803192,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:52.854005+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":668},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":662,\"bytes_toclient\":3102,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yqQLIdsRgvfbOg1c11Cl6fh1%2Fx5B6Ec3UnKcbtfJ5u%2BKANTLXoWHpUiekvpFBS8L1hIVcrJ%2F2O5uimrNSC2YPqtk%2BUu3kQNf6NYsvRqWd6Id7BCRbqImIG3kmu%2BqPpIR46g6Wg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04e3cf0569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5067\u0026min_rtt=736\u0026rtt_var=3305\u0026sent=98\u0026recv=112\u0026lost=0\u0026retrans=0\u0026sent_bytes=11763\u0026recv_bytes=6952\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=716\u0026inflight_dur=116\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/686623393:1751800443:HpLxNkJnW6bM8RkPPdmmCXHrdV7leMmuZX5VBURO4y4/95aef047af5356c9/h3CY6oyfKpxFxb5qiThbM5o_.Ffd0h1GU8bi0SjCr4U-1751803193-1.2.1.1-Hc57iV8hvx3E1oyqs8WfXWqN5FTyL8lQTROFPYef.vZHZnx37YdTvDNOoiwiacEO","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-06T11:59:54.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/686623393:1751800443:HpLxNkJnW6bM8RkPPdmmCXHrdV7leMmuZX5VBURO4y4/95aef047af5356c9/h3CY6oyfKpxFxb5qiThbM5o_.Ffd0h1GU8bi0SjCr4U-1751803193-1.2.1.1-Hc57iV8hvx3E1oyqs8WfXWqN5FTyL8lQTROFPYef.vZHZnx37YdTvDNOoiwiacEO HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: h3CY6oyfKpxFxb5qiThbM5o_.Ffd0h1GU8bi0SjCr4U-1751803193-1.2.1.1-Hc57iV8hvx3E1oyqs8WfXWqN5FTyL8lQTROFPYef.vZHZnx37YdTvDNOoiwiacEO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3287\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$pMPN46JyJ7pJz4jbopoAuw==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95aef04fa93556c9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":284432,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9b3c5e104575b01633738558b04c4e52","sha1":"bd869cc394d25d757a791ed08712a7dbd1246e80","sha256":"96394b66ffd9f9edc371828a7eed757b386b865c8583d21a95993e216756deef","sha512":"cc52cd68460e73eb7cbaa0e04474968c3df79378ff87ec6eb32995ae7fa90dcd11d5155c34535449d8ddc2509e598c934bbcdfd7893c741f822438274ad89010","ssdeep":"6144:O2HMIXM8A9kUoPqvp/YsF3cpiRr9CVkZ6790I3cA:OuXM/9kUZpwsVcpiR8eZ6790I3R","tlshash":"53542329e8213ddecd3a46635660961bac404b64043b90f8bffa7a86f11de4c9db41f7","first_seen":"2025-07-06T12:00:23.080117Z","last_seen":"2025-07-06T12:00:23.080117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZhHG7snBlC5G9ekYCmdcT24kq3TN4FEba%2FItFpK4dUXzFQO5jalsQkCIlyragEOr844Z%2F%2BU9vnbl0vdYnCOvNqvdq%2BZceFeAZ107CWPdnLFuBwb%2FItA2QwNH0vvU63uysvZ97w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef0515d0b569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3352\u0026min_rtt=736\u0026rtt_var=1715\u0026sent=119\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=20598\u0026recv_bytes=9331\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1288\u0026inflight_dur=209\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":7,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=95aef047af5356c9\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-06T11:59:53.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=95aef047af5356c9\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 11:59:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95aef049d9f556c9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146551,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da3c88b4048858fa0c759ab6b46b7a50","sha1":"0db40f91bb465c32957478cd9f76f6544064deb1","sha256":"98f78ef329e08be8162a1d4a9657fc579cf8734b4a81d8d25723a72f7a36ea1e","sha512":"67c41caeb4e9c9a9c6be3233a04e55ec083c53d926409cc9c1e304a5d8984cd61a086df32d40ceb953fbb292df12e5a4092de532d71e926af296733ea5190ae2","ssdeep":"1536:0iO9ylLbs3yeN31HZQKD9N75hXdV6XGaT/TbPO4hvIMDb7sW/TGjdqlKn5GHEftO:0iOf3JQKn75r6/TbWWLgnJftp8d","tlshash":"0ee3f88d3dca7a534321607919e376dbb19b7c88201c4b0dfb0489e43db47197aeadb9","first_seen":"2025-07-06T12:00:23.082509Z","last_seen":"2025-07-06T12:00:23.082509Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://keyboardcat.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjCHMGsXoqBMGny6TNDYlhZTKdbmgnVutpz8cU%2BLwWFKhDuWb%2FAT7pqjD75r00FYX5C%2FSv%2BkzQIBEk13b8QDB5MON7ZitUYe5unX7y6KAA%3D%3D\"}]}\r\ncf-ray: 95aef04a7bb20b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QoECr%2BluJOniisimFbRQifV5hC0RRsIHZxMg978P9JifOsTdPc0yskjfcKmjpaY0cUnFSML535B%2BmLBzvVCIBeI5kMqY9eT3GX%2BiHFMUl6FHb85fyvGrHfwZgOO1VCQ3br1vng%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04cbce1569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4762\u0026min_rtt=736\u0026rtt_var=3320\u0026sent=94\u0026recv=108\u0026lost=0\u0026retrans=0\u0026sent_bytes=9564\u0026recv_bytes=6356\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=486\u0026inflight_dur=65\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C0XBjiF84zqDilGFrAW8aod%2FfkOXPjc%2Fz30XjSIDiOgGaYn3SFbss4GvUb%2BOwTvUxGX1DrfgIJE71fMx0Yljr7gKw18DHcemA5cAhpL00tRbxCTlzDzqzTk6tR5deG8Urq1kfg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04eacf3569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4582\u0026min_rtt=736\u0026rtt_var=2793\u0026sent=104\u0026recv=116\u0026lost=0\u0026retrans=0\u0026sent_bytes=13984\u0026recv_bytes=7546\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=791\u0026inflight_dur=128\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gqyb8KqbBseTy4j9g7xjnTzp3U9BHjc677EglZ0Uk3g3pKY9w7Cci8JuDZ%2BVKBvpGQ96u0b8Pfz%2FKD3ET3voliuZHSRwF1q3OoUBFSrAV440XngY42B1XMGJdXPMXO9WLBxgkg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef0521d0e569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3326\u0026min_rtt=736\u0026rtt_var=1337\u0026sent=121\u0026recv=130\u0026lost=0\u0026retrans=0\u0026sent_bytes=21686\u0026recv_bytes=9629\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1338\u0026inflight_dur=232\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://keyboardcat.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Axfvi9SUe1CuM2nX7731U08gB96%2BU576lhJY6yO5rZ8FhQFGdlpYdwJieLYPBBgAYQkTQYt%2FmvUsm0YVDybQQWM7SX1eOdqtkQapOimiw%3D%3D\"}]}\r\ncf-ray: 95aef0499ad10b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":13,"connect":2,"send":0,"wait":10,"receive":0,"ssl":61},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-06T11:59:53.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 11:59:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 95aef049d9f356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/95aef047af5356c9/1751803194842/x0Wh6WCjedENhNW","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-06T12:00:02.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/95aef047af5356c9/1751803194842/x0Wh6WCjedENhNW HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 12:00:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 271\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 95aef07cdffe56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 28, 8-bit/color RGBA, non-interlaced","md5":"f528a5b8dcc25fb0da8b574e71d6b262","sha1":"78ae67b3200c76fffe8b1197c567788905257736","sha256":"c1885ca6976e1fbc07ade0e70f4772d3e00d60aa82ef9f1f386d243f967186d8","sha512":"01b2cdacfd15031b396817957ed22e2364e8231bc4c7b97c7e5b4abfe2e080011da4aad4e8f49fed3f56cd46fb02bc3a16e1cd301d5ba954f881784b3f6e4a77","ssdeep":"","tlshash":"d4d08cd0a2acf4e8fb78392302a38aee54281219f000487f873e40e31700cf384841dd","first_seen":"2025-05-23T16:13:23.956128Z","last_seen":"2026-04-03T07:45:18.257276Z","times_seen":111,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/686623393:1751800443:HpLxNkJnW6bM8RkPPdmmCXHrdV7leMmuZX5VBURO4y4/95aef047af5356c9/h3CY6oyfKpxFxb5qiThbM5o_.Ffd0h1GU8bi0SjCr4U-1751803193-1.2.1.1-Hc57iV8hvx3E1oyqs8WfXWqN5FTyL8lQTROFPYef.vZHZnx37YdTvDNOoiwiacEO","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-06T12:00:05.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/686623393:1751800443:HpLxNkJnW6bM8RkPPdmmCXHrdV7leMmuZX5VBURO4y4/95aef047af5356c9/h3CY6oyfKpxFxb5qiThbM5o_.Ffd0h1GU8bi0SjCr4U-1751803193-1.2.1.1-Hc57iV8hvx3E1oyqs8WfXWqN5FTyL8lQTROFPYef.vZHZnx37YdTvDNOoiwiacEO HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: h3CY6oyfKpxFxb5qiThbM5o_.Ffd0h1GU8bi0SjCr4U-1751803193-1.2.1.1-Hc57iV8hvx3E1oyqs8WfXWqN5FTyL8lQTROFPYef.vZHZnx37YdTvDNOoiwiacEO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 33911\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 12:00:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: V56h5DDjpKmE8qQmAmQbHKsKva8iTdOeR0Z23PL389wYmNwUfSVRPHXZN/P6jKdN$k4vyR+FuN0dDkMIh8RYUxA==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95aef08fd9c156c9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29392), with no line terminators","md5":"0a9875af7768fde421a92637d0c85c06","sha1":"88c68bcf8fbd766ac6d42424774267d235db9084","sha256":"aa16c3901b03b0710603037496f9ef90c37341ad4efb099e62de159a98bb6649","sha512":"fac5f5854e81ff59fb5a7bb776bcf60a36be254dfb92eddc6fb382933b72be4bf07bb74ff603c3128f5752cbfde47683dd1079687bd061bc6bbf551e3864ef20","ssdeep":"768:V64wOMezLzdRXQln1iJWA8RvlRM375/iuMsNKLch:VOOtnlJWX7MrRiuva6","tlshash":"d3d2e1c674f3528741d5da1c7da98c8c2fc4ff4c4865ea96ab06517adc24e02c6b772c","first_seen":"2025-07-06T12:00:23.086708Z","last_seen":"2025-07-06T12:00:23.086708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/e7e9d014f96e/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /turnstile/v0/b/e7e9d014f96e/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 11:59:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 03 Jul 2025 10:26:41 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95aef046be2056c9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48827)","md5":"8b98ab0c9c1187379712de2162d133c8","sha1":"13070544fcfc6954ce563779c26ba54b72271380","sha256":"73f6150de629bcd8401d4778d9a4f5460cbcce244f913447acbdd25ad50cca25","sha512":"7aa5c5b8d948acfb8b577a1c327c46b9f3cbe029d79fbbc9b9d40f74cb58c69c74b01d56d900755c9236b40089e5d4991904ce83683bd2186372621d8c88f746","ssdeep":"768:ECb719MkF248wa0rnnn/A2WNwyjj41fCXV2WqDsntFLNYyNiyY1LBep7iFFQ7XIQ:KkF2nwa0rnn/sif2HLNxig","tlshash":"be232b587166787227d980e0617ba7437325793ae94ccc50e823c97536acdcad233fba","first_seen":"2025-07-03T19:42:34.954063Z","last_seen":"2025-07-10T20:59:27.527001Z","times_seen":16770,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.523Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://keyboardcat.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 06 Jul 2025 11:59:53 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCross-Origin-Resource-Policy: cross-origin\r\nLocation: https://keyboardcat.world/favicon.ico\r\nCache-Control: max-age=14400\r\nCf-Cache-Status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7R7ZE0ekQCVCIfGosHuzFVtwvCM9Rcd25UnlatiLUsv9PbTiInHHX5Jrw36eh1tFPZO4l4%2BzUdH4rzJsWMF0MbMn9xiXbSDw5Lk8v8StQQ%3D%3D\"}]}\r\nCF-RAY: 95aef04778610b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://keyboardcat.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcUcAxGVPTsVCPfsKAg7VboDXLwgA7tBYwaHNWHDyucDz9qbTTSr%2BCgmoldNxwbliUrBB3ZKKsLgKH4zYsGKh%2BMA7ZM2AvbfUpfMuwhG%2Bw%3D%3D\"}]}\r\ncf-ray: 95aef04b3c850b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://keyboardcat.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1ETvgSFPHxmBD1BuQ%2BxjxmGj5XlFWG45f03aUMHrmSF%2Bvoou1lo7gQQD4IC6Bbaox2X%2BmJ4vZg5qEJk39uetDWf5byvXTAr8Qpnp%2Fr%2BUQ%3D%3D\"}]}\r\ncf-ray: 95aef04b5ca90b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eks2kb%2Fr0Ej4XDrSYxu9YZ%2FC%2BdvoI0CqxmxJToBX%2FgPw20lZK49AN7F%2FY2K5MWsu1AkY5PWWwC8K6L4U%2FXoINB0hb0U1%2FSQmnlDiWlt%2FhCQQztWfMc1AlPgFCK7sPv%2FX0QQHvA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef0511d0a569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3318\u0026min_rtt=736\u0026rtt_var=2197\u0026sent=116\u0026recv=126\u0026lost=0\u0026retrans=0\u0026sent_bytes=19477\u0026recv_bytes=9034\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1183\u0026inflight_dur=203\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ry8bq2oCKo6kfLzRxQ7XqQUkxJfHo5NHXR%2FyoA0m4DatYD%2BKCh45YzVuL3gFXICk3zEQZBY1snxOcQIdqiN3PsB4vbx5CfbPUnT5BKtYlBJYhuJnSUpR4XNd3fHkESxX7DjOew%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef0529d15569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3101\u0026min_rtt=736\u0026rtt_var=1396\u0026sent=125\u0026recv=134\u0026lost=0\u0026retrans=0\u0026sent_bytes=23862\u0026recv_bytes=10225\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1424\u0026inflight_dur=278\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/cdn-cgi/images/icon-exclamation.png?1376755637","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.356Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://keyboardcat.world/cdn-cgi/styles/cf.errors.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 06 Jul 2025 11:59:53 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FY3bvEikcY44iRuM718eLK0LXQ3Q26dEpb2jYDU%2FI3t31bMclBAAtNf45%2F7p1KIIBusWk9LDvIQbfNd7vBXLnFLics4ll77nU5gXSl%2FsDg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 95aef0467efb0b45-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"c33de66281e933259772399d10a6afe8","sha1":"b9f9d500f8814381451011d4dcf59cd2d90ad94f","sha256":"f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016","sha512":"5834fb9d66f550e6cecfe484b7b6a14f3fca795405dece8e652bd69ad917b94b6bbdcdf7639161b9c07f0d33eabd3e79580446b5867219f72f4fc43fd43b98c3","ssdeep":"","tlshash":"14f05c45c595e9f5a90330586311ca15ab7701c6276726c9d3854032a456482ca97f86","first_seen":"2023-04-12T19:44:04Z","last_seen":"2026-07-28T17:01:43.988693Z","times_seen":389483,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.358986+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/cdn-cgi/images/icon-exclamation.png?1376755637\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://keyboardcat.world/cdn-cgi/styles/cf.errors.css\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":459},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":14,\"pkts_toclient\":11,\"bytes_toserver\":2089,\"bytes_toclient\":9453,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/xgmg4/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 06 Jul 2025 11:59:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-z5IZVMDriDtY0Iue' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 95aef047af5356c9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26963), with no line terminators","md5":"78c3594fe55139d90945aa30fccd341a","sha1":"9440e58af1ade6d7592505af1bc062f3f52dbdc7","sha256":"32370bd38d1962170aeef086d7d94e547b7fd9dea83aa8dfa5316848dea3557a","sha512":"66bb055aa80c282fb629bba554a1058929b027b52d910f59c5e6f2348577974e879faaabe0d59a1f2a53778755d7f0c8fe9c3ee1e05f970150e1c765f0c80164","ssdeep":"384:Er6U+qdB83E29aJC6tHzSk1b2xdLVSmda3mDI9FBIrcPe2CFC:MdGrkHzlJUdLV9da3m8WSe2Cw","tlshash":"58c2b8038a101b7e7463872da3d1b5c9a3387a025f56b1bbf25012a58f4d6af3b5371a","first_seen":"2025-07-06T12:00:23.089882Z","last_seen":"2025-07-06T12:00:23.089882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://keyboardcat.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TakatiyZPpXm1kEaum8f5oDIeIwDwzesY65yEvmuk31hD2fVxD46JduqcsT%2BAq%2BPAkVuBArHSd6Q8FBwuXl6VXoGilUzlVyr5hCtsYuZMg%3D%3D\"}]}\r\ncf-ray: 95aef04bed570b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keyboardcat.world/cdn-cgi/styles/cf.errors.css","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.253Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/cf.errors.css HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://keyboardcat.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 06 Jul 2025 11:59:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgGGn%2Bv1VFaP8aqiXWTqGSa9arLtmzOhvq7FBO5yC6HdphowYlnLHmIUSAXh%2B%2FVEud9THBhaoDa2j0hq%2FMsB5LA%2B69d71JnX9iuOXppf3A%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 95aef0458df20b45-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24050)","md5":"5e8c69a459a691b5d1b9be442332c87d","sha1":"f24dd1ad7c9080575d92a9a9a2c42620725ef836","sha256":"84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091","sha512":"6db74b262d717916de0b0b600eead2cc6a10e52a9e26d701fae761fcbc931f35f251553669a92be3b524f380f32e62ac6ad572bea23c78965228ce9efb92ed42","ssdeep":"192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk","tlshash":"86b21323e5f5381a2516a13ca08a92dc69356073f7f30e9eb985d06cd78dd791f226c3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:58:57.69742Z","times_seen":534284,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.207718+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/cdn-cgi/styles/cf.errors.css\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":914},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":10,\"bytes_toserver\":1283,\"bytes_toclient\":8421,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FI9W9ttSWHpB7RLTphSWsKLWncypfyiH1EI7mjar5wdq80DMP9B9VnnX3kz7bWnKJ3MEmPi4t0Pa0KhcsjDSZtByyJUFnEFLAQO%2FVz%2BY6kYJjG5%2BhEKlcXAQUzwvpRImeTKUog%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04d3cea569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4526\u0026min_rtt=736\u0026rtt_var=2964\u0026sent=96\u0026recv=110\u0026lost=0\u0026retrans=0\u0026sent_bytes=10681\u0026recv_bytes=6654\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=557\u0026inflight_dur=88\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QpSxj5JyIEpNf%2FuWokPT1R8f7kRZdZL6eX5P%2FhfLjVJR1vU4ysFV9%2B7E4d3OO1LFgpKWjFfwiwVrN1pX4tAJ480lHJxKgVHKMmO0sjgprcPy2hA2YTkQAv40zb3UqBRqdYSitg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04e7cf2569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4995\u0026min_rtt=736\u0026rtt_var=2622\u0026sent=101\u0026recv=114\u0026lost=0\u0026retrans=0\u0026sent_bytes=12874\u0026recv_bytes=7249\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=755\u0026inflight_dur=123\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TE21wqZldyU8ses6MSHjjWLb%2BCg57vFNYC7DR7ceP3045zH%2FzxiwMNT1wiHpV91g8tXMBNZn2%2FIJCMLNM4hpkPq8daRnuymJl%2B7lz9%2FIvclQGMAzsPFBwwPl%2BQd2E%2F%2FoQSSg9w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef050cd08569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3669\u0026min_rtt=736\u0026rtt_var=1995\u0026sent=113\u0026recv=124\u0026lost=0\u0026retrans=0\u0026sent_bytes=18357\u0026recv_bytes=8737\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1131\u0026inflight_dur=199\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:55.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=09eyB%2FhTYnKlHBagPilqFNLfFQTflPcCBm48MPQGAaMnvS4Dxfl%2B%2B%2FvxF2s%2Bld67fI6yVbqi45VpRFYKu3HA1jgzcws4KN9MX4tmN9Oq1oyi%2FFJLd7WPyN02EOJkwnLk0kxxzg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef052cd16569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3101\u0026min_rtt=736\u0026rtt_var=1396\u0026sent=127\u0026recv=135\u0026lost=0\u0026retrans=0\u0026sent_bytes=24948\u0026recv_bytes=10478\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1447\u0026inflight_dur=278\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:53.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 06 Jul 2025 11:59:53 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/e7e9d014f96e/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95aef045c8e1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":48828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":15,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JS6oXwhyvmH4%2BWQz9WGgIEFz6vumm0rfLmHEWFBr2R9HuYlVIo5VC038KMCSYRKzFxt3UTuwhrja6AlT6BAr8KlBtEzliCy8XVfNVHXjVw2BenQEhA%2FgHiPBbqVP6DfOvqTkUg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04efcf5569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4290\u0026min_rtt=736\u0026rtt_var=2679\u0026sent=106\u0026recv=118\u0026lost=0\u0026retrans=0\u0026sent_bytes=15067\u0026recv_bytes=7844\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=843\u0026inflight_dur=150\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pR4GhW7FBFRfnd2%2FkqOwCQKokDzVxVl8BXNYUJpCdW71w7U8%2FDL9EFXk6sjm%2FQU1izzgCkhfWyhHm4LNLKLtU6fgsxIL7qi%2Fc%2BNfoGIctlM7XgHo8EKhtQauZ6VmFTsYPonoyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef04f8cfb569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3859\u0026min_rtt=736\u0026rtt_var=2870\u0026sent=108\u0026recv=120\u0026lost=0\u0026retrans=0\u0026sent_bytes=16153\u0026recv_bytes=8142\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=932\u0026inflight_dur=171\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keyboardcat.world/favicon.ico","fqdn":"keyboardcat.world","domain":"keyboardcat.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://keyboardcat.world/","date":"2025-07-06T11:59:54.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keyboardcat.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 11:26:38 GMT","end":"Wed, 24 Sep 2025 12:25:11 GMT"},"fingerprint":{"sha1":"D2:5B:C8:AD:58:C8:E6:00:5D:15:F7:79:6D:32:F1:E0:34:55:98:74","sha256":"CE:80:7C:29:00:81:9E:15:19:B4:F5:52:4B:9E:10:1B:BA:02:13:4C:99:6F:B1:6D:09:8A:1C:D5:AA:63:A5:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: keyboardcat.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 06 Jul 2025 11:59:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=T2Sac%2BPiN%2BNggsTIm60gCka9PPbiTGNE0X2TezjR%2B0LHBtn9Olb%2BznWxXeo7YJFhwaKrzU3nzYz%2B0q5Sp58ZmGAPfMEzbD3SicfKd1Bl%2FXP4gNeMLz8vtN40CoUw7axbokJ6LQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://keyboardcat.world/favicon.ico\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95aef0501d00569b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3858\u0026min_rtt=736\u0026rtt_var=2154\u0026sent=110\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=17241\u0026recv_bytes=8440\u0026delivery_rate=359219\u0026ss_exit_cwnd=14922\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=d117a0380598bbd7\u0026ts=1022\u0026inflight_dur=195\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-06T11:59:53Z","timestamp":1751803193,"ip_dst":{"addr":"104.21.64.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":59746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-07-06T11:59:53.682161+0000\",\"flow_id\":1646969184896722,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":59746,\"dest_ip\":\"104.21.64.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"keyboardcat.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://keyboardcat.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://keyboardcat.world/favicon.ico\",\"length\":335},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":14,\"bytes_toserver\":2634,\"bytes_toclient\":10702,\"start\":\"2025-07-06T11:59:52.837330+0000\"}}"}],"analyzer":null,"urlquery":null}}]}