{"report_id":"35d00bbc-967a-4a4a-bb15-289635a51c1c","version":0,"status":"done","tags":[],"date":"2026-08-11T16:39:33Z","url":{"schema":"https","addr":"dark.direct/","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dark.direct/","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"title":"dark.direct | direct access to the darknet","dom":{"size":1701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2af9b5d269923cbf8a8e05ea9b233c53","sha1":"ef359426b07e561fbf9354836a04635d89eaaf9b","sha256":"35dcad3057a1f6a89e358244997cec100843e95e5b88c71e227134f85e170075","sha512":"c3017c8d9f6780ea92bf59a3a44eb25b528b3501d020c6b86f40bcd2199a76cd08c0d5f6b06205368ad5f97e8552a259a34bcf83df218e1e935b5dd03b113cfc","ssdeep":"","tlshash":"53310ff269208d1824474996e987495823ec1613d048dbacbdd1a6beff48dd88772e5c","dom_hash":"domhash2b32c01cb1116b9d32108aec2b07355c","first_seen":"2026-08-11T16:13:20.901371Z","last_seen":"2026-08-11T16:39:33.780616Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dark.direct/","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T16:39:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"dark.direct","ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-11T16:13:16.76225Z","last_seen":"2026-08-11T16:13:16.76225Z","alert_count":0,"request_count":34,"received_data":96259,"sent_data":16414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dark.direct/images/a_images/tortaxi.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.327Z","timestamp":1786466337327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/tortaxi.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:43 GMT\r\npriority: u=5,i\r\netag: \"649ec3eb-1f7\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4odi1Ak7AV75a%2BGVSW9quuetzo3PONDsbuFK3%2FuBN0EXCUQe%2BARfQs11HYgQjc%2BHnYwA%2BeQAkM1lstDDmsM5WwoSjwcHynfigrs72aq6oZPXwAJ47aBphz%2BBplipw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac704a7e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 503\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":503,"size_decoded":1358,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"da81d1754bce566f21b7b14dcb2fccbb","sha1":"d7b86a7d245154b2f581b5bcd578abe0f0087bb1","sha256":"7f8a6db1f9697b5aadf5fc94e3ba8d9963629d9e42dbc5247450aaaa59d073da","sha512":"bd6635628958e26770421a170de5bec8f23d5c222d32eb1d4dc716a29016274b1f5a3d56bcfbb88f6e124894457966dc0ee2f8b61343a54b5eacc96625028107","ssdeep":"","tlshash":"56f07e52ba0d3ab8cb7c86ff2194000a10208a0c4790f822140869ab6cce802d9af289","first_seen":"2026-08-11T16:13:20.919165Z","last_seen":"2026-08-11T16:39:33.783937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/calculator.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.299Z","timestamp":1786466337299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/calculator.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 11:59:33 GMT\r\npriority: u=5,i\r\netag: \"649ec3a5-87e\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ui71CCVbqX4ck2KDJ4JUSmQW0bAMjcnbgzVSQu7EvuAehfU7G2QS9k3us%2BBj2%2BZDhbReMx1C9xeyW8SI4QYcfTKe9FHvIKfb6SVzQXkkVApIsEf3rCm5TBH6J%2BRltw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac701a611525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":3024,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"f2773ef39173eb403e572ae451c37001","sha1":"e2fc784b3fc0959c94ff3e2b7e0db6b6124dbf8c","sha256":"530879754057e013e61c7a26dbee4b14dc374d0c5f21b6b0c7ea8b6b15c13975","sha512":"dae33a5ebb28b6c28885901e71ed8f027803223d3ebdb1a76f5445663d784e522e029728bad319e84d93fc7245029fed8fa6f417b0a472a41c1d922a58292c2f","ssdeep":"","tlshash":"4f413a3b0a18cc422be6dd9052a8266c1632553792bdbf881c4e1c2964f963fbe7d261","first_seen":"2026-08-11T16:13:20.933453Z","last_seen":"2026-08-11T16:39:33.78617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/incognito.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.307Z","timestamp":1786466337307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/incognito.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:58 GMT\r\npriority: u=5,i\r\netag: \"649ec3fa-1e5\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxsI91YSVYreCXOfmHEgWJQS9W6V61WI3BumAylio1MVQmBUzxB22yAoBQBiFJrpE2LCTQzb%2F%2FoT0xU%2BsKVARbpFY2dKhB2oyVQLpbecnrnD%2BG%2FeU29qWIYXbTQN2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a681525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 485\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":1349,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"ae5b3547384b459043aa53b06e4c5685","sha1":"492f9caef5ac7755c9e38f001ac7804348299a68","sha256":"d3a1011561fb384a76f8b8d3731fafd3d1c983888d7f073fd3f79d6e9eabcfad","sha512":"7fba69d603aa1e74e0d53ea42fe62413ad35ec9f55fbe9dd35c6216a23688036ab509403b5dd6c22f38debb2a3021501f59d1181ac82c41d9b22a78f994bc667","ssdeep":"","tlshash":"e2f0f1fe12a5d012ddfd553dc69063b0c6422b05f1676e0d498236a8b77f28d4f03236","first_seen":"2026-08-11T16:13:20.930382Z","last_seen":"2026-08-11T16:39:33.789061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/smokers.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.314Z","timestamp":1786466337314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/smokers.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:53 GMT\r\npriority: u=5,i\r\netag: \"649ec3f5-246\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuO2wsD9J8%2FHl8XeUFCFwUYb6IAk9gq%2FNqm3%2BaeCjbywqci%2FAAWXoVtwJqwS%2FbVwu01ZNCFwUbKPh2BmzG3W86TYBEjIVyUjJGl%2FE94Qa%2Fsb8esLXTY9zkRgOFrcIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a711525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 582\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":582,"size_decoded":1450,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"daa8270d7496159361a3a431bd1c06a2","sha1":"ba1d791e9912b3e679ecc8309805ffb218990c6e","sha256":"3cc287575e1296b711398796b5b61853088fd35d2210d219e9d789196356fc74","sha512":"5610bf6ffd044532cd0c472b7a8e3ed1c18cf3f8be386a94442069208eb7f5b22ef8e63688e01582980dff91c7ddabacf5f3f2dd3e6f661edf9b571cbb864ad7","ssdeep":"","tlshash":"9ef00eba0a999120dd5e18778600a77ad389cd02d2658e2d8dce2ec82f7b0c8dc40286","first_seen":"2026-08-11T16:13:20.907799Z","last_seen":"2026-08-11T16:39:33.791475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/favicon.svg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.617Z","timestamp":1786466337617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 30 Jun 2023 11:58:58 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ah%2BeG4pS61BQD%2FYN5iIGrkKu7pLGKXx2jZPHEnuKrvvsZS%2Fwq5yEgcAXL7OkrpgGd6P1jbUmJTAAjyiI%2Fht9T15UuUf4JYJZkdd8hpLQaAJeUog%2FqIgkXP4fWcP53A%3D%3D\"}]}\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"649ec382-101\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a298ac721ace1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":257,"size_decoded":1036,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb6e67d13b0e74ee99adb17630313e30","sha1":"c4e0d207804c0b4abedd3fc61449537957c7d9d6","sha256":"d8fcdf9e2d09a88ad7852a66b67039b6354ec329b037e5e479076881cbd3cb75","sha512":"24943d4f03bf4e39b015e7a2ed6ffc453e61a8d2ddf0d3a90dfa7c773ed91c0833a57e2202f603c36b056874680f16bc00b5e725091e970f69bdec874e61ece0","ssdeep":"","tlshash":"28d05e6c80ba4c8a5292d0250a1f798571a9c08343685a587c9d9938df089b228c67d4","first_seen":"2026-02-13T02:07:07.904115Z","last_seen":"2026-08-11T16:39:33.793622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/dread.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.319Z","timestamp":1786466337319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/dread.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:52 GMT\r\npriority: u=5,i\r\netag: \"649ec3f4-1d2\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxogeZMJPci5hBeB%2FWvehoVY8cbLWTwwlNFtc2guRU6EBqVGUzkAYbMrRdob4fZCcdmEuUAFNGRHKKiOcDFVKOEA%2BsGFfWUUoCKF23sCUtUc2S37TwidusUXpG74Ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a771525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":466,"size_decoded":1324,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"7c445b98071996a77f5fdf9e09958672","sha1":"68dbd54805adba5b8b30d7561edab40fa5c639a1","sha256":"01fa6c94f0ed688c2b1753f5176e958d6fedde4266baeb477ed68a57995bbb85","sha512":"edb1c1ed42a2aa72c63ad915c5342fc03b74ddf5a5feb9cb535570b2d8fd9fe7c7b170a9c308a26d22c67bafd436e3d2685f59e62fa10cec1c8f7cb25c9710b0","ssdeep":"","tlshash":"f5f0615f61744423eedf57324a0077b04f515f01a975bfae05d1976877b90c95b20112","first_seen":"2026-08-11T16:13:20.916265Z","last_seen":"2026-08-11T16:39:33.795698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/logo.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.293Z","timestamp":1786466337293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 11:59:33 GMT\r\npriority: u=5,i\r\netag: \"649ec3a5-fff\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EBXSNqCp92YdixZ1HQNOjKDS1fsm4ip%2Bv4Tesg23KgjKE82XUkvpIua4aGw8IEq4EtpKt%2BPXDGIWZwdBKn8n35fqzZO%2FcU66I3PLSuBeo2eqXeHS%2FNyO5de1xjuMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac700a5d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4095\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4095,"size_decoded":4957,"mime_type":"image/png","magic":"PNG image data, 279 x 37, 8-bit/color RGB, non-interlaced","md5":"665b67017d7430c0a1ebb3171b1edec0","sha1":"5dcaee2666673826646e818bfe86cf5b4146e43d","sha256":"9c0ed950f52185732de00747eeaaf089e724636e04023922757af5210c7d80da","sha512":"9de30d77cdc999fcac945f2ac7b95fccd1fc56a7c058ca8dcb4d5c861552baf8bfe5f1d57aafe72b27ba87700afe4205549bc4490722a6d9bc2a9f6f1c52b60f","ssdeep":"","tlshash":"1d817e50de6f098b88563db75edd7c0e5ce80514b244cb07efae6d031d960991264b2f","first_seen":"2026-02-13T02:07:07.847389Z","last_seen":"2026-08-11T16:39:33.79748Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/archetyp.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.305Z","timestamp":1786466337305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/archetyp.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:58 GMT\r\npriority: u=5,i\r\netag: \"649ec3fa-1ae\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkHW7qQrvV%2F5PK9GkjKkxHZuT7SPJw1DBNRT6LRasdg5lMDEnw67cpGP3Y9uDZYzim6ocWjs%2F3YgcibRflGpSAUuChBtS77c6VBwCOkF0p74r4H60o0KVt%2FAMOYMDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a671525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":1280,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"a169a258bb4baec2aa2cdb66f3e145b4","sha1":"95eab822ece7a3968dac66b0d7686ebf39ea11ed","sha256":"42ebfa523562cf4b315e08893ce475ac89b6686e584d591f8ba34b7ff3f3c9fb","sha512":"ae2ee7feee3604bf7af787130df4f59494ae5dd0973b14960abc747fbfda92cfb34c623a5543346f5f31dc6497e3110cebbcefa3a2a36a2301c91a5725e6f2c0","ssdeep":"","tlshash":"13e0c05b09612d00ea1f1b328315636087452f60e6365d4d8ca3412877178c49d29122","first_seen":"2026-08-11T16:13:20.922537Z","last_seen":"2026-08-11T16:39:33.799786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/cypher.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.310Z","timestamp":1786466337310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/cypher.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:56 GMT\r\npriority: u=5,i\r\netag: \"649ec3f8-238\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24f%2BiXzm3YDA3FuNKW43KJHfZjLpQ8V2IqltNQw%2FUMONIiKVBlCyXdg0KjnU5AQYql4KaOpqdsYi1uX%2FbPw8fwwuj6aW3GO07nQflijTj7KpRTc4xfOGAkhYiG0uzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a6b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 568\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":568,"size_decoded":1428,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"313641fd970bc9d51a08515b2785d4a8","sha1":"1d10a09d3ae55fdefa38f5a36c57e952551178a8","sha256":"5a836235f4d4ffb4da5f830974255998a4918c667e972ee2cc92e2e90d85f7bc","sha512":"b36f4326818e6d963de67be7122899f2c13f96aa492c8d13af4a16edfff34239b98b315488ac27b15f5b10038e4dd47f23c1b926bd78a7d99544b66f064e6c33","ssdeep":"","tlshash":"abf054b285308010fe3f5a37c100a3e0cb01be942c3f892d0963a1487b7b8d9ae13451","first_seen":"2026-08-11T16:13:20.92739Z","last_seen":"2026-08-11T16:39:33.802196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/benzos.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.318Z","timestamp":1786466337318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/benzos.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:39 GMT\r\npriority: u=5,i\r\netag: \"649ec3e7-539\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7JmNXv77z5EM3G1GCCT2yiexzqur6%2Bga0rpdyYo%2FgdE9meBMf7qcCRMwsJ60%2FSVi4%2FurZh%2Fyh4ccn6%2F1ZI%2BD%2Bndp5xIYFbnRBQ04HoL%2FqGotAFsL1DXGJ5FV25ypA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a751525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1337\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1337,"size_decoded":2209,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"af584548e0d8ecb739d44730b77bd1d2","sha1":"581873a10746683c5de1d449f835d1809bab72c4","sha256":"cdd02e2546d5c70916e171b29f913efacbe0f4e5c42775ac5f87db602e3e9db2","sha512":"f41a7ff7fae0b7cc5605040b82879c73970e84c97b3282bee67f0f0e6a4f3ea8b8a379f8379e44205fb029c5d65f17bdbc2fbd787b8496da1bee622e58c0506d","ssdeep":"","tlshash":"b021f84b1ae68ab3f7d05b37847246c9d5746f276a2c861d4200ffaabfb2082dc45284","first_seen":"2026-08-11T16:13:20.924614Z","last_seen":"2026-08-11T16:39:33.805014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/pokerclub.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.328Z","timestamp":1786466337328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/pokerclub.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:43 GMT\r\npriority: u=5,i\r\netag: \"649ec3eb-336\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMPM%2F8P7UJkiczpWRLIoS9PcUqWOUWTg57pbf4mLcNFpNDn1Lso4fDKCAQvIO2K2IPv%2BSrHjY%2FFsnDnmT5SNS8vaK6iFinsLxHiVJTNqf1zyiWQvEMNZO7iSlj2lGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac704a7f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":822,"size_decoded":1681,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced","md5":"70f24d834321b51bad942812ebff9a59","sha1":"eb8f5d443d798037cd0a091031379aec66c72336","sha256":"3523d80f4aa6f2f7178702df08100d6d91e208c8f99aac2ca25415c0176740ec","sha512":"49e5c7ef4203b758f7906da9106ce6cf7d2817d53fab0f438efadf094e685f4963e0af5578aba2df288822d8c9e3ad5e5d54467b320347bfd36c82f5831c3acd","ssdeep":"","tlshash":"310175f54f8b4eb9bf1f43284460b0e5f1182d78fd55e66029419c2eec94e2ace3b851","first_seen":"2026-08-11T16:13:20.902562Z","last_seen":"2026-08-11T16:39:33.80771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T16:38:56.861Z","timestamp":1786466336861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\npriority: u=0,i\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvL6NFMg%2BAN1gdXTNIkOW7xB8wY0tKndeIFPxi6UetrMXtmRCMopazfmaFGM5GShqQf1oM%2Fd7TxyTmz7MaxIrg6m6ieFdFOsgjWbkz0gskn36iAt42RDYXwRW9Eshg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a298ac6d89f51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17289,"size_decoded":4403,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (361)","md5":"e4a1d5911a8dd29731614daab7a3b245","sha1":"b4d2015803d9c89d28a8c8f6100de860dd477358","sha256":"dc4a8d36a9585bc8f2311fb288858b50a78e315fc4aa455265b4da3e09592912","sha512":"1446618d5d1d210c9526ccedf12122e7f2c870b3228ae6b8f536a744bd46779bf3654d479af8a185b7c5bd23ac3934c2188c13d178ae99a3ea07dbe64e25dc31","ssdeep":"192:gFSkWDCZwA38u0wmVlvQsTdN3/QDEBkxnr14lMsL11vzskPzrULDPn:YlWDC+AhZopx/851r1471tzskbryrn","tlshash":"61724425a1d230370817d64cd125bfb5e4c1aa71c24a2a1af7ff41ae6bc2df5662350f","first_seen":"2026-08-11T16:39:33.810511Z","last_seen":"2026-08-11T16:39:33.810511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":8,"connect":18,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/sluggers.ico","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.325Z","timestamp":1786466337325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/sluggers.ico HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/x-icon\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 30 Jun 2023 12:00:45 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrwVWNH2f9Jte3xwyEk3Xp4QCeIMjq0XE4zj3D30DfXW8ROhIUTs%2FdmTAwfi%2BF2TCtJfOZfyESRNKutt9t2%2FF%2BZ%2BtitBthtXhkuszVeivTFuTTUCVUvuMCkHeVrnIQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"649ec3ed-47e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a298ac704a7c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":1429,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"9cf3518a47b418835206fc1ac661da15","sha1":"5f12c0905db0d8a9e2be50bdfa092c3a09b2c29c","sha256":"ba91d0b7cac641958ed5321c449c177385f0ec6cf3c8a9ac6091fac869397ebe","sha512":"1864bedea72b9e46c0072b18c79c835ebc3f8566538b671a4a7330442577455a551be429e9b7f569fec830e6f539f7e67b1b140af0e01275cdaa2569d575cc2d","ssdeep":"","tlshash":"4221abd1a1c64146f82a0f3192b1ef3ad1277fe5516d41c911b4b4023ff2942547e483","first_seen":"2026-08-11T16:13:20.931324Z","last_seen":"2026-08-11T16:39:33.813204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/danwin1210.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.333Z","timestamp":1786466337333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/danwin1210.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:38 GMT\r\npriority: u=5,i\r\netag: \"649ec3e6-9fb\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93Ay5iWi4wYK9PuMvUnayOCNVbR0wejuCUYeHPOAFH518wq9SUWMXQX3ttvoYYHxMB3c6tZqe3kXT%2FWmPs5R4DAptcttjf4NHs7%2BCH4A%2FQJkRap04J1v4WGK3hEibw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac704a821525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2555\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2555,"size_decoded":3415,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"bae2daab5f36562f3cfd6614aa8e5d51","sha1":"b255a8d84593546cabdc56f40c00fc85de99881c","sha256":"c0cffae9a877d8b24b0288286c35c4874ab5dc8a2bb3e35dee903b6b4a4fdcd1","sha512":"c8b28fae79cea82d1e1a393ca2c8a4a7b138425ed83d22a3c737ee053e8969f7df62a5b4bb3fad1badafc1986cfa2fb62b746cc452003cb65818eef2656c3792","ssdeep":"","tlshash":"c3514ac3cce0c599fb27fa85a9d513c28787d6b26a08449e148242ee31ae300ba6470c","first_seen":"2026-08-11T16:13:20.908727Z","last_seen":"2026-08-11T16:39:33.815113Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/asap.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.300Z","timestamp":1786466337300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/asap.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:01:01 GMT\r\npriority: u=5,i\r\netag: \"649ec3fd-286\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EubVIEQwHWs7OvRPxiANAtjYRF1%2B0FKbUHYOhxnNikL5XWmslobdVn462QSJA3Fv4xaICHq0ERdrYIHG4kBw%2BUavlfTmySloCybvatuyxz7x1OS%2FgKcqDfeydz1KDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac701a621525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 646\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":646,"size_decoded":1495,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"ba47aa2bb1992d5a637726e9da58b4d6","sha1":"b4dc281b7c181789f32ad387c6da33a30710ea08","sha256":"a1ade48b45cb0c86604299355a7fe9dada6ae2b23e14828b9b3019232de48981","sha512":"c2053295f66cced7c10af5a8cd65d4b2a95cd377225524c2395875a3b004a4173f800326535af96893483667f874b30790d15dee9110f69642963846b485dc11","ssdeep":"","tlshash":"50f068f0f5b18e10c7e903906b268b05ec3caa98ce646d6d7188de077ed355a50e539b","first_seen":"2026-08-11T16:13:20.909617Z","last_seen":"2026-08-11T16:39:33.824784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/abacus.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.302Z","timestamp":1786466337302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/abacus.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:01:00 GMT\r\npriority: u=5,i\r\netag: \"649ec3fc-1be\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1xg2SwzPIjSVkbSsXs5UR3gwWecCI3yMwgp9E5Vhdzn58R4fUXh0sTnBEV5GdGS2BdhatgUj4Lh016SJ86MmcmO3oi0TAvR%2BPY7IoXAiFYcsIFzDQPHsFnbaTy3fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac701a631525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446,"size_decoded":1302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"0ec4a1039790724c682b67bb709debc2","sha1":"1dbb97d34ee40364e019645f14dc47e1fd20ac5c","sha256":"7e40b3e26dc80b1238a2219bdef46408f72d8f0ee984b444752a550aa613ff25","sha512":"36e3fa4fabc77fecb62186aaa473c6c52cb8f1f4206b63aa788628f0c211fa6023bc74b0f927f370bb709d2c22211c9aa9a3b92c1531e631ae851479ad0c3b17","ssdeep":"","tlshash":"c5f0c0b709658078edaf14368624d370e7852f815d75cfcd04934024bbbf8957e94112","first_seen":"2026-08-11T16:13:20.910655Z","last_seen":"2026-08-11T16:39:33.826579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/winston.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.315Z","timestamp":1786466337315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/winston.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:53 GMT\r\npriority: u=5,i\r\netag: \"649ec3f5-23a\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYpWUcNiYUgPmtzluzE88fAJsEef%2FBhKnav66XiWNrnoxgri08T%2FnaTE4kao96atZ4Ddt%2FAV9PJ%2FYSY5pyQQCbmjSuuikkH0I8pG0vyQtgdaIGP%2FDEGYw7SwFQSpZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a721525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":570,"size_decoded":1424,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x19, components 3","md5":"e1d60ec66845cdac8e2e1b79afc32853","sha1":"1f60e4cc916397e7264ea9021c23f8d5100bf96f","sha256":"34e0a94118b2b6f1c0f186c136272d0c84091e5f1a342987216da59aac652488","sha512":"77f80bfa0d3f8787c40dae3d1b6343a86f32f2b96c48217e2e9e753777e4b18bb34c2d0d5f934276b757d470fef63f9372194328bfc926d33f33ca3c87de975a","ssdeep":"","tlshash":"eff00e970e04c842ee0e05354a945b6532026b10a1a2bf6e04eb01bc2b2b1c4dc90116","first_seen":"2026-08-11T16:13:20.911427Z","last_seen":"2026-08-11T16:39:33.828624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/tribe.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.313Z","timestamp":1786466337313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/tribe.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:54 GMT\r\npriority: u=5,i\r\netag: \"649ec3f6-385\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEm47hbjkbDP3wRAtsTBmdh3d9l6dbJopwuTstIA1B266dHYp0xTZX20fG%2FTe4tA9Ts4q4CS0dQZtRurqRL%2F1VLQ5TwuraF2PwjHGWA1loDdAX0I6fk%2Fht9i1N2olQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a701525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 901\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":901,"size_decoded":1760,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"7ed236c296b275014dce4ce34db9942e","sha1":"a46eadfdfde1456db444c6a28268dc0871056e76","sha256":"4389b3b8c14b23bd7d6d4bb238384f903204afea66b1eef187b6f9eed1d004d0","sha512":"35bc216cea41f656c9b96230116747c3b281f651927dd2fb09cd031a946aa295000c57a3ec1bca6117660ec8b7d224c77011ce606472e61f5252c4419fdbcac7","ssdeep":"","tlshash":"8311c8d7e154c15bdb294d36d7e44854dc2118cc06804f281004eeaf344680ee553351","first_seen":"2026-08-11T16:13:20.9067Z","last_seen":"2026-08-11T16:39:33.831601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/xmppis.ico","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.326Z","timestamp":1786466337326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/xmppis.ico HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/x-icon\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 30 Jun 2023 12:00:45 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5Dv9VFwKaaLBTfNUq0HcVbIvCWHXs8W4%2Fhj1vD%2FImVBj56g7zql9hiiJGISzxQJB3waM8pQHwabrpr%2FFtkrpSS1mZBzRT7aAPX04DWpSm8tfs7PRX6NfUOz5Hidow%3D%3D\"}]}\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"649ec3ed-13e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a298ac704a7d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":975,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel","md5":"891ecd7c20f9db08c59575c455759376","sha1":"6f90159f1cb125a532ca196be361eb1ea120f86f","sha256":"8e38cbd74c4928f17370024c433c5b8c80e386e47506d5b3961ad879b107dc4b","sha512":"5a9fae2ab78aef288283602c6d6b98243e7a4a2517b076e7af38cc6dbf62b651d1148bd266e37df47efd12a80c9a7710bb83531d4752949f380a1ca4d5805e22","ssdeep":"","tlshash":"d5e002312f402166c06caf3144d61b141384ca4094f4471f872040d8fd956cd1c75db5","first_seen":"2025-01-08T14:29:17.407857Z","last_seen":"2026-08-11T16:39:33.833157Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/infinityproject.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.330Z","timestamp":1786466337330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/infinityproject.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:37 GMT\r\npriority: u=5,i\r\netag: \"649ec3e5-558\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NZ%2FdkAoZKbE68%2FPbFEWaa6TbL7TuVxFE9wzxPsgq9RXizXeicRjnRQvXynu%2Fjj%2FAemVsUs4RfqyzF%2FmpE4RlZmagX1mIXkzP3meAtRpWHSbq0eBB%2BtzZOdvkIZOLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac704a811525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1368,"size_decoded":2234,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"bf5de1c2ec70a6f94ee80bc003db6374","sha1":"78f6df1f884f35c73bf8a010f4051087ccee60bb","sha256":"2fdb70a144067cefbfae9d9613cc8bc180a4c486a605266cad44171db5c33af6","sha512":"47994451be7ab54cf3fa7fbbe98fc88626a4c8c9d610035e1b742f95cd026512143f5f272fe80ef883bd699b7d3af7fcd7c0236e359d7e36ebbe327979e756ad","ssdeep":"","tlshash":"6721bb77d993c91d86791c6e48100cb35d1285563b1ba67cdc0166d4b2da5c051da437","first_seen":"2026-08-11T16:13:20.914217Z","last_seen":"2026-08-11T16:39:33.834007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/garden.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.324Z","timestamp":1786466337324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/garden.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:46 GMT\r\npriority: u=5,i\r\netag: \"649ec3ee-3b2\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2F5g4ife2glePgr0C4QMtV6GOb%2B%2FV%2BbWUSqq081XF8cLgKTd0GqAHwc0uqdCBGEs2EqZIV2z73%2B79HmAp1PL1O1p14H%2BIz0xvc5Vx5Xv%2FA%2B2HsXBM2idW36PUTcL1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac704a7b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":946,"size_decoded":1815,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"5a9369c1580dba6ca92e5233cf7a6c88","sha1":"d1806d64f08107ac5f370be8d73be6629058064a","sha256":"e4c2d152e0f016a597d1accf4da5ee25ab8d57d0769c02cff8fa50ef951f3335","sha512":"38100ea6399f5c23d22d87288cdd3bbd700edba58006463291acf1a165649e52c741e6fe242591389aa02a39ec51c742291f77edff075d4af467d8f200425a56","ssdeep":"","tlshash":"7111949355d94b75b15be961d7b8741a4d29bab04112952720bc49ee87f882882a038b","first_seen":"2026-08-11T16:13:20.912294Z","last_seen":"2026-08-11T16:39:33.835246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/style.css","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.277Z","timestamp":1786466337277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 30 Jun 2023 11:58:54 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sE1t9amYFpjbRUHN8cfqUHZMaQQKsj3QZm92lRVu6QAK7hFU3TtCsCajPWKrawt690vpASaUgbju3jcALe1d5b47WNqqkvkhh0nUMnT8QxtluZhDfLp7b3fz8m9uLQ%3D%3D\"}]}\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"649ec37e-31ea\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a298ac6ffa591525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12778,"size_decoded":4042,"mime_type":"text/css","magic":"ASCII text","md5":"9b44dc60f311e77e16d4d71ca4921d0a","sha1":"da136ee874607956456995cf5067ca92fdee493d","sha256":"9d54b2f54405a4ef8bae56f6d4c297893d7aecdf18f47018282d858dbcf54ea4","sha512":"7898f280a3664689aa997b50e1e25aaee315ef0d45de6d904930405aa206463e1699d674183bb1bc95f0009dd29b2b62d1e485a317ce5f3bbcaf0b9dd19b5308","ssdeep":"192:MjnpCfuDCCRjOD1yMImtR8z7phf5flBZfBaGtEkVy4utfA5S:ZFDBII8z7ffBbJU45S","tlshash":"a34262e1cfa5151a7517c00d65819a9533ac4003a4abefbebff1b06ceeca7d09263718","first_seen":"2026-08-11T16:13:20.926491Z","last_seen":"2026-08-11T16:39:33.836441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/calculator.php","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.287Z","timestamp":1786466337287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /calculator.php HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OaliSFFN%2FidGxWp0Z5PgNi%2BKDS37OHg7Xho97GRK%2FbaPF9LvfUwVPJO6x6eWmIFRlIZi5hSlVRSLmSO4NCfC88DhJaPS6jDGNE9kn3xNr4shj2fBPJt69qiYu2%2Fotg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a298ac700a5c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1676,"size_decoded":1426,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"e03f6f14494010af4c56996ec194db93","sha1":"c85b4d0e97034eb33a1738eef4a7bc42c59df49d","sha256":"133a1f58ec87c113141a25f19367be7aa0ca3148106fbfb4ab42eb9eeb46ce14","sha512":"07b804d5b554474d7d8fdc136ea8efaab89c1e70fca59e95573fde3809653a4727e86bd9b174a1c7b2fdb6d08cde131694aa77c27ee2891fbcffe72578d48574","ssdeep":"","tlshash":"86311ef239208d18244b4996e9874d6823ec1613d048dbecbdd1a6beff48dd88732e5c","first_seen":"2026-08-11T16:13:20.920296Z","last_seen":"2026-08-11T16:39:33.837744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/bohemia.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.304Z","timestamp":1786466337304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/bohemia.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:59 GMT\r\npriority: u=5,i\r\netag: \"649ec3fb-225\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccMLPLK%2FZtanDneGux5tDxK3MIkBFg%2FkCcU8RASMgEkeeP4vXkHVVc8uEHK35QSlHStvpRbNbcboN%2B9716927HQvWlROG%2Bha2qo1xPO9SBTe2%2FnWoaMotWL4mZt4Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 549\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":1413,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"07e2e96cbf23cf752b602bbf68acd42e","sha1":"65b0e2af21d4da177eaabf5c6ed8d3ff35a1e52e","sha256":"2042d580e22a54ae67892cd1dd05e62f153514e1df46e4bcf261f8d2ca901135","sha512":"706b0fefeb1b9ced680a4d9055663e126fcdbb4605d9b354c6f5dfba761a3de2748b0bbca7630bb4110f691ef3257bf60eb5e9a8be366a5f419bcb60e4f59f17","ssdeep":"","tlshash":"75f0dcfe2594c128fe2d4d3a8656a3b5f3421a82b8129f4e0d5381b07f3d086ac04129","first_seen":"2026-08-11T16:13:20.934277Z","last_seen":"2026-08-11T16:39:33.839082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/kingdom.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.311Z","timestamp":1786466337311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/kingdom.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:55 GMT\r\npriority: u=5,i\r\netag: \"649ec3f7-1e3\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fGu9%2F%2BwD5cjsqNnXbn5Deanz%2F0kmeJg1VPk6wZfBpym%2BnRXzIgdKtXoFwFNBDFf3Nl49FKyhDma1sRVAiVv4c3EOYK7N3xKuRtmDZ86UEfgGPE8g8W0JCp0cg64%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a6e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 483\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483,"size_decoded":1347,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"52798e65164c404c39aa66876aa69ceb","sha1":"6b25d117abf6cbef97b01e2e913cec6cb7f0c6a5","sha256":"f82128bd89ad12f23cd7707705ef6b5e96a5fa5b50ffd6dac0a22c82462b50f8","sha512":"1ada77b3aaf9240837073ad799b19fa54de6402f07c2dccca078e14a9026facdcbcff015f19f4c393c658edf6226af691dd9d239bdb247a3719569a51c7dcb3b","ssdeep":"","tlshash":"b3f0a2e7a810c820d9ae1f334812d32e4380af02ba300f8c4cc38c083fbf4ae490201a","first_seen":"2026-08-11T16:13:20.90476Z","last_seen":"2026-08-11T16:39:33.840831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/sectorcity.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.329Z","timestamp":1786466337329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/sectorcity.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:38 GMT\r\npriority: u=5,i\r\netag: \"649ec3e6-509\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AK1gwTheahRWymgxzCG5CkC4TnwwxV2vIJxbMlJ%2FBpXj%2BqtE%2BqhoaQVEC%2BofPDbDduABBXESdY0trgRGWRTHKzMfAAxgNDfMofB9U6x9UqEU40t66Lglu2r6%2F59kZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac704a801525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1289,"size_decoded":2153,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"862f5392c3af43b97dd9aff3629d6cfa","sha1":"3df79c9fa6f071320475b8e5729cba6a83e158d8","sha256":"5c5adcbde063ce4dfeab78157f4eaeb617695785547e98911405022437f9f910","sha512":"dab88b50a3b74254e3a5c5469fe3917dcfb8a5c0e69fbf3556ca55951e12c0b55d1950cca64285ef19c505a28893fad4793e9d7e7ae21c887fb8ba96783b52e4","ssdeep":"","tlshash":"e421c8b3e5882970d9d5d74f1d2e033ac1f51a2450cb569fd6297209ca034110110bd7","first_seen":"2026-08-11T16:13:20.91323Z","last_seen":"2026-08-11T16:39:33.841973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/bitcoin.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.295Z","timestamp":1786466337295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/bitcoin.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 11:59:35 GMT\r\npriority: u=5,i\r\netag: \"649ec3a7-476\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzuf83xaW9W1Es4qQe%2BJ1UEb%2FW9aHQr7mLth7Y6CD3yBada4bBcDEriD%2BKSAN4zTjUBolhBYbMw2Ocv0RVqlyN8eaUgVeaJP6QfiLenIgSMoEtR01i1W%2FoBWfsbz0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac701a5e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1142,"size_decoded":1994,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"4bd4e7a45acef42be5a6d4a900f2f354","sha1":"31faf2cf207cecd3f893ef19a2ae619e1be07fa4","sha256":"b146a8a1fa4f55e677abaa977e14adcc4eec308ffaf8ee573ae63c613dde57f5","sha512":"548868efbac29e77cfad06384e24496a83b5b40f6461b04310825860c4a33239728b1a8516ab7dea5c970d1d29360e6f9524f66a9f6278eee7957b8116fffeeb","ssdeep":"","tlshash":"bb2167d814316bf4d9c631ad410548b5a098b49e572ba39d80d4b8854e367534787b96","first_seen":"2026-08-11T16:13:20.928244Z","last_seen":"2026-08-11T16:39:33.843187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/monero.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.298Z","timestamp":1786466337298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/monero.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 11:59:34 GMT\r\npriority: u=5,i\r\netag: \"649ec3a6-43e\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLMzQR19Qvp6bpFlWtzxr2uFfASgU8%2FnBOXvdrH%2F9Ci9UXX34z%2Bu6l139YBXCGQqYFsID%2B%2BG9iauR71BXZlFhzRHxf587csoLKukClHEEaOs4yfg5umXcRl7%2FV5nDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac701a601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1086,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"6786f9074d4bb6fc542f1118fbef3b6f","sha1":"7a526dc15e21137c48270e7eade4e7b0a60c3401","sha256":"cc994e1511a03489d0e7859697dbf75f41aaa7bc39702ce8c0ddc46736e826a8","sha512":"68a4d2af0c1cf96a732a8fc7f97578ac3b6db826199f4d806ffa7b5cb6f6360d53355423accd41191a19a39b77c0a987d0b66d31d8cd5bfce742d89f6fab5f23","ssdeep":"","tlshash":"4f11b6dafab15e89c356af02921b051af835e69d22a1634c6c04d1990530f80314e515","first_seen":"2026-02-13T02:07:07.870683Z","last_seen":"2026-08-11T16:39:33.844296Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/tor2door.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.308Z","timestamp":1786466337308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/tor2door.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:57 GMT\r\npriority: u=5,i\r\netag: \"649ec3f9-206\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PVLyfNh07BzhcwSTy0%2F%2B8X7PTl0EAkesBtB6xFcwdUMcwck1GTY2IjlFnePPkrL75TZG9Shx2D1noupkgxv8n7QkpzXS3RVOS6I8hki57yorP3nOCnT6tKXY7UH8iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a6a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":1366,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"21e3bb5d91c0f0a2e083f79ac47e3b1c","sha1":"ac333f0416241eac147fc4dafe0a43250dc13cb4","sha256":"89209d5d9c44e2f67206285564baccfd48073a5853969cb53d4873660938f071","sha512":"c6f951119c1891c317e6aad391362b8b77f66c5328db5b590ad0e66b3c75b2c1ca0ed551567fad128861db87d96c390abd247506aa639176d35b7d378d4028d7","ssdeep":"","tlshash":"a2f0dc9b41bac906fcae0b358049d315eb809e6028734f0d4ce2a264773f80a9925482","first_seen":"2026-08-11T16:13:20.923787Z","last_seen":"2026-08-11T16:39:33.84499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/gamma.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.312Z","timestamp":1786466337312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/gamma.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:55 GMT\r\npriority: u=5,i\r\netag: \"649ec3f7-257\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPjKB2UlLmU7glpsO3y5OI0MuPSuOl9SIwyq4F2nL3CtZAZFEMSVj37NenSMP3Dger6FWTgUxmhbkel4x61a%2BW6Y%2BBDhEGNbb3SPcX9Z3grhcieu5kUFZ7kDI5ct5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac702a6f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599,"size_decoded":1457,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"bb47523bdef941f043fb12ab0811a2ce","sha1":"2d74b26cb7b815f836fde10bd667fca6ef780d7e","sha256":"d24807b42521079e25c6c3834e2695491e477b72a7f62b7c35921716ce74c778","sha512":"10a91d0170e8c3670cd954e32b6c2c247f624988aa6b33b6dd494b5f7a4c38affb40ff5908eee7b95d75d00760a79f9aa33241527bf520c7ace19369f17a29de","ssdeep":"","tlshash":"edf0206b84b2881bf41e1931e01203e49b0e4ef06939cb2c4cebb1a8a33c0c166144a9","first_seen":"2026-08-11T16:13:20.905767Z","last_seen":"2026-08-11T16:39:33.846078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/protonmail.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.323Z","timestamp":1786466337323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/protonmail.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:48 GMT\r\npriority: u=5,i\r\netag: \"649ec3f0-3c2\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsyoRT9oqdGhMptMjm2qxiLnSLsuWO3XWuOiCrPv2d6%2FXhhW0nD3g1pRY1kAXDecD18N3GL%2FZa48vF8KriPv5YuQe2YB6SC9Fh7VUp7QkFiO9rdZXpy4QTHgiQ9aoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a7a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":1809,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"d3111214233e69961bbb686d309d2bfb","sha1":"92aee5ad8f9d27ed863fe75bede03c4d8c20e37a","sha256":"b0fff2a76af1cfa717a08cc56ccf5b95d6fa12a018ac3b6dc1d097731d04f57b","sha512":"99dfd2671ec2f96f6af8e3c046c7653ffeb7441545e92e80c0f0ce7ad0fef4f45d9a3c9276d7c38c213a7e58dd76095860f130f7f9840cfdf8e5ed2bf81957e7","ssdeep":"","tlshash":"711198731146b5286bd7256397e701d9e4dd293881368dd5f12561b60499d202f5c246","first_seen":"2026-08-11T16:13:20.925615Z","last_seen":"2026-08-11T16:39:33.847422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/karma.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.317Z","timestamp":1786466337317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/karma.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 522 \r\nretry-after: 120\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 11 Aug 2026 16:39:16 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a298ac703a741525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7217\r\n\r\n","headers":null,"cookies":null,"status_code":"522","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7217,"size_decoded":7669,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (510)","md5":"4ec75bcfa444430c79854da9e9ca4f1e","sha1":"04ccf4500f963ccf9dc0a44352986f1ff06cf2bb","sha256":"c21286e2c7fc79d150f48af4bdab508a06905c4371834b014c15793a957c0d0f","sha512":"3765f159e3f42a308e388c8ccfe54f2f7acdb184fa1845e7104be4fed15ff29e3f79d08001caa6d67ea1e3b54cfc456ce79df17b499fe212dc51f998173c159c","ssdeep":"96:1j9jwIjYjPDK/D9KUAG4Fh8/G4FA8424Fi+skKm/jotQmHB+dWS8H7RJl2aQxP:1j9jhjYj7K/BEea0VyjoWQ+D27vlReP","tlshash":"68e17672b1f5127600a382923695ff5a79e0c613c7ef5598b7dcc2632f9ee81e903194","first_seen":"2026-08-11T16:39:33.848555Z","last_seen":"2026-08-11T16:39:33.848555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/recon.jpeg","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.320Z","timestamp":1786466337320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/recon.jpeg HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:51 GMT\r\npriority: u=5,i\r\netag: \"649ec3f3-1e2\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpEfOzP1Jiq9tVy2bYFg6aV26SOGUWZfSBD8jnEZngUiu7j57pyPIiDJ79tvGItv41UTp%2BtW33yGjzBWQxHAV2R6dAVeOsNh6i%2FCsxerWUq98Z%2FaIyKLKGrZAlnyjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a781525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":482,"size_decoded":1342,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 20x20, components 3","md5":"25a148f6f754b6523971fd1a7082684b","sha1":"7b4f0cc5165fe46ee4ab0a1871d0f651876aab39","sha256":"97accd7fa8e1420e6325a497233f75c3416580ae4d2fefbdf9b0f65fd8f926b2","sha512":"32669669dc24b9ba1389fd13964bd96c16ce984cf716358f2e9d4838625ec5110c99562053c1f7820231b6e5ee47c4010702300bb425b405dc8fc851026d1364","ssdeep":"","tlshash":"09f0abaf67515451ea5e0933510277a9af052e50abb21b5b0d62a12cbb7a884dd00066","first_seen":"2026-08-11T16:13:20.9172Z","last_seen":"2026-08-11T16:39:33.850309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dark.direct/images/a_images/tor.png","fqdn":"dark.direct","domain":"dark.direct","tld":"direct"},"ip":{"addr":"172.67.181.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dark.direct/","date":"2026-08-11T16:38:57.321Z","timestamp":1786466337321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dark.direct","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:44:49 GMT","end":"Mon, 21 Sep 2026 14:43:24 GMT"},"fingerprint":{"sha1":"24:70:1B:38:93:0C:D0:80:59:D9:39:4A:A6:71:9D:32:19:44:B5:0F","sha256":"4F:02:BB:5D:E8:CF:A9:66:1F:96:17:B1:FF:BC:F6:C3:5A:21:AF:90:C4:25:39:A0:D7:CB:ED:47:08:99:82:2D"}}},"request":{"raw":"GET /images/a_images/tor.png HTTP/1.1\r\nHost: dark.direct\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 16:38:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 30 Jun 2023 12:00:51 GMT\r\npriority: u=5,i\r\netag: \"649ec3f3-3e2\"\r\nreferrer-policy: no-referrer\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRbG5ugvq5EFKm9TaCmrAyI4txke1w%2F66I72%2BDo35tgCwR%2BYr0OZiudmMGGisEQZv%2FADCUDWvWCEqQS7Hw682riAlxcReMla0rT13l293V3%2BaOQrW0h9avWVSSWBGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a298ac703a791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":1857,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"e3d9125da90650f2f240bd0739bcd77c","sha1":"c02b95c6952c69f49bd0d409d1125ab0cbe296fb","sha256":"452fdc57cda8032f8394dac0a9d72c3270bf331f32fd9f5778d8b7d89365869f","sha512":"5d8e0c325b1b5afb5917a31b45ae97008390629db2d8e4cc4a965e40064641d9bb50b4cc1d1128f55b5962ad2badd4913770e01a46f8f674eb0632ff37cf5e6d","ssdeep":"","tlshash":"4f11ccd8bd187b2d55ce0b53507d53406d72f4d8e171454820093dc25599644c1a054f","first_seen":"2026-08-11T16:13:20.918244Z","last_seen":"2026-08-11T16:39:33.851697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}