{"report_id":"eca8526d-3798-49ff-90e3-f676225c1a88","version":6,"status":"done","tags":[],"date":"2026-02-14T08:22:09Z","url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":""},"ip":{"addr":"172.67.138.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"title":"Neura Knights","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":""},"ip":{"addr":"172.67.138.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T08:22:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"neuraknights.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"neuraknights.app/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"neuraknights.app","ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-12T17:43:46.553891Z","last_seen":"2026-02-12T17:43:46.553891Z","alert_count":12,"request_count":11,"received_data":4196846,"sent_data":5039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-24T15:36:16.234328Z","times_seen":3225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94e89a3556e15e2bef65b74e0b763f53","sha1":"21dcf9b6bf2f2d25c8ad72464e0b5d976632ed6f","sha256":"14fd632efaea9277695863778c59f41353c9892c07dfa22a98849d71d81b5832","sha512":"3dadb052cd223ff5e8c0e240a2ab7bc153248f0a1936ca767b9bcbbafbc60dcf4e26c197a2ecacec73575fc0671c40430bd0728221d5cbec56214401cd0cade9","ssdeep":"49152:ycpkGzoXlBcrs+kJb/ItajQPloJGbmVxmmiSwW2QUSvhjG+EyY4bfO3xrQanJfCj:toA5Cb/6ajoOYb8","tlshash":"d70633852c47a5b48f844221b1eb9d1b516d1c23a99de1dae64cf5c2343ffe182ebc2d","size":3655943,"data":"","first_seen":"2026-02-14T07:52:00.598525Z","last_seen":"2026-02-14T08:22:12.896986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fbedb0b3347993aaffda511427d5ef7","sha1":"e20ab6a72f14d0d94e111b2f7b05c3260c936a07","sha256":"0d5314efb310b706bb73a055d0863a287a2636eb5e9eceae221a74a5895a94ec","sha512":"252650d07bdc4223ba829bba1298a0effa6d343cbc58d9651350bb49138d3baa710235fbc428fbc8f5b783f8531f4527b67751143b72a75790efe8f217e525b2","ssdeep":"","tlshash":"ce01f65d27f332b9627f2162d2038489be50506370dadc49741c91894fd6e6464de69a","size":657,"data":"","first_seen":"2025-06-07T13:25:17.713531Z","last_seen":"2026-02-14T08:22:12.898758Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-24T15:36:16.235088Z","times_seen":3368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7cedee5f4aabfe0f0a25596641b0073","sha1":"9e90df4076abbd3350295826c5ad3ec1856ffd56","sha256":"c2e60dc68f09c70895f8cb98a4a88e16cf3c691d5a96b9c93c3aab931eafc258","sha512":"17dc0e86fcd7af709d5ffb50d255169d2300566d30c2da4345505703e6a6ebf303df263db9561688753bc03af86b134ccfa9f763966f8612ef554be796d6c025","ssdeep":"1536:jQe6pw4biVcuVXdWAgB1PusH2DY7sX3lX56oH:Me6KBVcuVtWAgR2Do2X6oH","tlshash":"7fa340d59a4bd0e08e5a11edd077ed0ae0281aa3cdacf193b92cded1355df22c84753a","size":104467,"data":"","first_seen":"2026-01-07T13:23:26.460119Z","last_seen":"2026-02-14T09:07:38.76649Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"neuraknights.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-24T15:36:16.242832Z","times_seen":3155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"137446cd4a09eade45b6ee56209a8939","sha1":"ba5c33c40e2e646939c2a4ec66ec2a94d65dee0f","sha256":"8a405d88f0d74619e1a1a161863c4e3b7d6d4f3b78754cc749a018f0f734340f","sha512":"c04999ee9f739f21519a828ff0962794089bdc7a96e64d2a587d11a477c45d01c8c4f422c822fe397bf33c2d5239b13a4b4cfe1579e074e7e6737bffb8c2b6cf","ssdeep":"","tlshash":"5fd05b4868645a3d14cd6dad8acf14cabe234415b2040ec6ddd8d9546ab1b6901a2458","size":254,"data":"","first_seen":"2026-02-12T17:43:51.095967Z","last_seen":"2026-02-14T08:22:12.903622Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-24T15:33:23.231151Z","times_seen":3224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/orion.js","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","size":107989,"data":"","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"neuraknights.app/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-24T15:36:16.22932Z","times_seen":3122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-24T15:36:16.233421Z","times_seen":3282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-24T15:36:16.228616Z","times_seen":3327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"neuraknights.app/css2.css","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:45.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: W/\"69787700-1dcc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2lF6rl4dpktOjz9vKf2Ot0GtWAdaRxsfuyviuJiwIqIiSb2g6xsTUS6gJZWwFMhpuYP37H%2FZOEFV5h5cyIksG%2Fm2%2BpExGTlC%2B3zJmJ3rM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb2760eb472efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-07-23T13:59:00.917986Z","times_seen":562,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/background_4x.png","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:46.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /background_4x.png HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/a619f4a4cdabddb3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 37997\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: \"69787700-946d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9I6BZJ3RNJRLG31VvWrKf3Ma14GwohlXUHoyIt1dd%2BPh4dfK503McE9Fx6l7Ul%2FzIpvwYYDWOQNYpiFVoTm3gq36DMQZ28C2kbLN31FAP4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb27644c732efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 1400, 8-bit/color RGBA, non-interlaced","md5":"e1e8eb7daabc971d13f7575f14da8a11","sha1":"a85e082cf313e48b39e792bf6acae25262a3c750","sha256":"94451030bb84da3e7f6d58f4fe18655afae163d4248be595346032a26636cc76","sha512":"c0486c1ccc4ea76fe47406aa14c8d265c648b2caf277dfd2ec78c6fda3a130494f4929d9b4750ff6ba55679d6f02d1bf123088cbc72e1889399c1243f7df9723","ssdeep":"768:FBA287yW8WSElujXc5f+z8+qIPXav2N3FG5QOPbL4Wvs2:FB787vMIP5f+AKqvdhUWv1","tlshash":"bb034bda6cca9b34d9921379bfd31528ee8465fb551e8b12d123d238b43bec0584c87b","first_seen":"2025-11-16T07:17:15.238398Z","last_seen":"2026-02-14T08:22:12.875106Z","times_seen":3,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/logo_2_with_sparks_white_outline-1.png","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:46.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /logo_2_with_sparks_white_outline-1.png HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 7396\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: \"69787700-1ce4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKQj9hj%2FNgZF4domtmBNP6CUip%2FVdwfITeGOlm4e90T7pu505nwCtifUyzYCD7hvU9dcP6R5PfnSgTcezseJjPhD70I1gIBiNWzH6KKsFew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb27645c822efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 636 x 588, 8-bit colormap, non-interlaced","md5":"0ae179feb311d260184c82bc20ffa329","sha1":"c84913243b0dd84cfb17c6a486d46fe769ff4c6a","sha256":"201cb6bf42e4cd94d2d351e2afd5c05bc6515d92b941bb87e83ccdb3e1b6c4df","sha512":"cc0a9fcf147811f0adcda503c078d81a782fe8b99dcdaee2fd17c2633cebed055849a1525061ffbc85d74e1ead8dd5c2e3ba7a2f78223c735e09d057dd4b35c9","ssdeep":"192:09ISDUvLjbQqrH/RzOGR7cc53NpUEVVALzbe9sKe:4PEjDRzO25dpUKYzi9sKe","tlshash":"09e1af5d4607c9a7c41323396ab8213806d35c7a934e6d27f2491f5936fe163bf629cc","first_seen":"2026-02-12T17:43:51.093883Z","last_seen":"2026-02-14T08:22:12.877034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/orion.js","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:45.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /orion.js HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: W/\"69787700-1a5d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Edq5YlNWuCOVP9oy2rQHHbiyp0RslYVln1Z7N5xgdjLeD72qqXx5tvb1pT1J%2BBquuBSH5B5ADliqOsM1BPWbWO5%2BclYLU9y5M3eDu3A8ojc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb2760eb3d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"neuraknights.app/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/a619f4a4cdabddb3.css","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:45.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /a619f4a4cdabddb3.css HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: W/\"69787700-e1fb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3fKL%2FwVlB7u1eCUQ7SJzMvDd0Pqb9OzOWkeKNegOBVqCbwtZ61Vutjh1eRsfEJiMCqjNrEcVM6gXqGh4fWLUDDcfTgr0NgslCQJpQGZx7%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb2760eb3e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57851,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57851), with no line terminators","md5":"e109ca979974df5d48127db0d3fb169f","sha1":"bfb643913edfb3b09fdc70d209eda0a23747c7ba","sha256":"69a9f551e570a81052944bf38203839f75fe73eefe58d6d442f85b63e4d4224a","sha512":"238e0a157cb330bc2209e885f9fbe6e845ff53e8deccc6a83a17f7618c942bd8bcfa132b8fab3fce2a492c9375b0747b1240087a515fd8985cea1c8bba98b9b1","ssdeep":"1536:d8yw2ew8FjUudse1rCtjB7RCW37C8cvD/JUf21oq:zw2ew8FjUudse1rCtjB7RCW37C8cvD/t","tlshash":"b54363e4f36ac83fbc2760bda7acf95c61097186df151bd9ff01722192c66f21862624","first_seen":"2026-02-12T17:43:51.091037Z","last_seen":"2026-02-14T08:22:12.881598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/8a660fc04131d352.css","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:45.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /8a660fc04131d352.css HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: W/\"69787700-24b5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9ui0YtFlRlIZQ6q9cJ6Nfkwb9nO89Ficp5fRSt%2Bf4upNGtdhkqPCCeZRw2l2wwH3Q9HQreIfj9TUzgiI3dHaEIsVQtzyRU%2BY%2F6qyzP%2FcVs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb2760eb422efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9397), with no line terminators","md5":"866b3b18d1a6040e9b42dec1056263cc","sha1":"06b5693c4389e3256483b42a8fa0ee978cbdcb1c","sha256":"5871dd9da4c15c3fa1d42ad5a6f975bf5589794b63be95f8ddd3de6176919739","sha512":"f3b39ccc8dc2d2f5670dbbd9b10403dc46e667bfe73b3d90161b75ca3db654c32bfbb125b8ca4ffb8e1deb6a5cd70a32f65a0a4c4bdbcd73c64e01f4d2a85607","ssdeep":"96:l7p0H4kop5H4AdpuH4EapTH4/hDh87hRpghHH4EpSQvg4/RxppjH4zeJzpwH4G:gY1YfYhY/FQyJYEpSQvg4Zx3YzeQYG","tlshash":"a51259344029804fe576bcd235ca7f23297d201546e49a22db2c55a98febcb773e0b98","first_seen":"2026-02-12T17:43:51.092253Z","last_seen":"2026-02-14T08:22:12.884964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/6c0ac9c9569cdea8-s.p.woff2","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:46.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /6c0ac9c9569cdea8-s.p.woff2 HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/8a660fc04131d352.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10992\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\netag: \"69787700-2af0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37%2FHJqy%2FI%2FkEwdxrvCtrmUJ2jNFURxGuFBKR2W4Qria0xHoV19mElaapDI7zONiJxisYj0jTjzRXRTn0QJMnFXfwAm5bot3OMrsgHpPFvJ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb27646c832efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10992, version 1.0","md5":"0f7b0a31eca971488b99b96de3bb2e82","sha1":"2bc808723070ab8c5260352c65eb261e88a7854f","sha256":"0c5d068e5fcf71fb24267cb8b2b9e311ba574cb0fc2d18167ba15de58e461a2e","sha512":"5ca22cbea2c8c904e7095bd622e1dff6feff35509a5c175643368549b9867800519e7e625daf026d0da9fd3024ae6fd5b9744156418be9f7ef71ccd9ea77e17a","ssdeep":"192:IeSdhL77Q2eJzYDdIYCVU6xw6HC7A/7yHo5nk86/xBK1Et2Rh4pI:IeSr7Q2eJzYD6DG6yLAzimnk86zK19Rf","tlshash":"aa32bf818a6c2276ffe419b6e4430078876d736bdcf3254363168ae9ece741316652c7","first_seen":"2026-02-12T17:43:51.090083Z","last_seen":"2026-06-01T01:42:45.451452Z","times_seen":4,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/secureproxy?e=jscdn/getFile","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:46.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://neuraknights.app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://neuraknights.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"eo2upuit3j1bi7kc0oxl\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxag7kY8aX9Yp3QUCFPOGoTmCdv%2Fgv0GZiyBOosacHOeNYqutyc1aVU4NRcfdmzaC7DvsYheoei7EywX0KGEjH%2Fu9YPK1DWhn9OonPwQp3lACw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb27647c882efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3673053,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5b98793765a220348c7b53f0be26808b","sha1":"f489c44950f6c4b6b3453e864fa14c9e82e17247","sha256":"2557758495e3ef12a0f46bb73088e85b274059c8f920c2b1ecb0ad4e3f9b6c9a","sha512":"82b98f6caa860f75b0520056cf25783705923a85724878343d279102deda98600c2177c8a1af157777d5eddc87d3fd9fa4a9d36967b95657e06af09cc41cb6ed","ssdeep":"24576:x8pMOTgnKBUT+ubpi68jt+LaLQZDlZXh6lMX9T61nB3tFaTFei:x8pMOTgn1fpj8j0mUZDXAlU9TyB3tYpR","tlshash":"812523e4e0c190e43f64de3857e76aac907ab06fb9d666790908594029375e3c7ecce3","first_seen":"2026-02-14T07:52:00.577609Z","last_seen":"2026-02-14T09:07:38.76019Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":707,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/favicon.ico","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:46.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:47 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69787700-1855e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VMkSAhjCvKIU5KX0KzNGF9%2FBjfWAwFZYs84lfSQfhwLpiwleYwZX19cMHKjmXxZJSblNQXA58MLaEiCsFo3To4Brd2Z9NCFwDOaIuBca5g%3D\"}]}\r\ncf-ray: 9cdb2766dd172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99678,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, -128x-128, 32 bits/pixel, 64x64, 32 bits/pixel","md5":"811c403398f7a768778e70db76bca5fb","sha1":"a099782c9e6a1b2e0b04b863a87f93e62dde0689","sha256":"2c5cb1fadc7e5e5479b0531334e4a618b71b6d88003d627b3838d6cd355f1dd0","sha512":"e61fae7310f6d6522f16926be61c9c3fad8177adaf203c855ff87e41ad3d4b4f4301723b8c637ddba5a6066d17eafc8492b1a379d96e0e9ab8c259779880decf","ssdeep":"1536:ILTsl1f4gK8uRZjanF1WDi++qF2P3nB+tBzQj3Msz:IvsGZjMF1WDb/vtZQbt","tlshash":"48a36d4c3e88171af1e9ba7af02666196a774d456b020f53f7d7743fad332c41a23a24","first_seen":"2025-11-16T07:17:15.236637Z","last_seen":"2026-02-14T08:22:12.891808Z","times_seen":3,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/favicon.ico","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neuraknights.app/","date":"2026-02-14T08:21:46.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neuraknights.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 08:21:47 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69787700-1855e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=982rN9C2%2BZemZ%2FwV%2BE8GHvCs4R62VNAxUkXoka6Xs6gWXmmJxzllXHd0XcEprT3vAHdx1Dl5gv%2FOi6bAr%2FETULxVyJwBNua5RublQQ%2F9GTM%3D\"}]}\r\ncf-ray: 9cdb2766dd162efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99678,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, -128x-128, 32 bits/pixel, 64x64, 32 bits/pixel","md5":"811c403398f7a768778e70db76bca5fb","sha1":"a099782c9e6a1b2e0b04b863a87f93e62dde0689","sha256":"2c5cb1fadc7e5e5479b0531334e4a618b71b6d88003d627b3838d6cd355f1dd0","sha512":"e61fae7310f6d6522f16926be61c9c3fad8177adaf203c855ff87e41ad3d4b4f4301723b8c637ddba5a6066d17eafc8492b1a379d96e0e9ab8c259779880decf","ssdeep":"1536:ILTsl1f4gK8uRZjanF1WDi++qF2P3nB+tBzQj3Msz:IvsGZjMF1WDb/vtZQbt","tlshash":"48a36d4c3e88171af1e9ba7af02666196a774d456b020f53f7d7743fad332c41a23a24","first_seen":"2025-11-16T07:17:15.236637Z","last_seen":"2026-02-14T08:22:12.891808Z","times_seen":3,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neuraknights.app/","fqdn":"neuraknights.app","domain":"neuraknights.app","tld":"app"},"ip":{"addr":"104.21.54.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T08:21:45.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neuraknights.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 07:32:16 GMT","end":"Mon, 27 Apr 2026 08:29:42 GMT"},"fingerprint":{"sha1":"C3:E3:5B:FF:D6:B1:32:2E:28:EE:76:45:A6:67:AF:A6:49:B5:25:00","sha256":"24:46:90:A4:9D:C0:7E:CA:5B:71:FD:AE:56:E0:0F:9F:EB:81:8B:38:80:2B:30:C1:20:9D:0E:FB:03:E5:B8:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: neuraknights.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 08:21:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 27 Jan 2026 08:27:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1puJUhQFOy9qngzgzWdBBMn%2F5pexJE0ICLxBOWunyp%2FbgRXO07L%2Fqz%2BS8Z8HV6OT3evuEcZNZhOsH%2BELrJJKO6lTNYVsIXA8XsVYgBO%2Favk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdb275e3c91723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74995,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5924)","md5":"67c607ccf715f4ede1b8a58c654b6f64","sha1":"fb86c621c75b984639dea38d9c9093bfc80b4b74","sha256":"5ba1e23537b774ebbdc8703f735f18733e3469fc5275e4b50e66cf723fc2c390","sha512":"0a6ed134e3cc437bac6f3ddeaba45c69ab8704ab40277b805a68cfafeae1cd0c6c31a84299a170cafcbd4f8bca7a49ea3e7ef42bd0cfe50ad79f82084ff9e181","ssdeep":"768:JjL+fd707NXaHKJN/zs+QoZzkCOd9xxxIDMVI2DDamAFfKmXHHIwDCXmCJXYltwg:9a3KXDVz7GxWGJ/dwQAvzoCx","tlshash":"6e73d78afd11867a751751ae37d3decd636022036405f79c7aee00c0cf8e9b659b3a68","first_seen":"2026-02-12T17:43:51.087236Z","last_seen":"2026-02-14T08:22:12.892931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":52,"dns":35,"connect":1,"send":0,"wait":278,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neuraknights.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}